%PDF-
%PDF-
Mini Shell
Mini Shell
type=USER_END msg=audit(1674634441.525:4238079): pid=27222 uid=0 auid=1055 ses=257379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674634501.540:4238080): pid=27456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674634501.540:4238081): pid=27454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674634501.540:4238082): pid=27455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634501.540:4238083): pid=27456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634501.540:4238084): pid=27454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634501.540:4238085): pid=27455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634501.540:4238086): pid=27456 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257380 res=1
type=LOGIN msg=audit(1674634501.540:4238088): pid=27455 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257381 res=1
type=LOGIN msg=audit(1674634501.540:4238087): pid=27454 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257382 res=1
type=USER_START msg=audit(1674634501.623:4238089): pid=27455 uid=0 auid=0 ses=257381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674634501.624:4238090): pid=27456 uid=0 auid=1055 ses=257380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674634501.624:4238091): pid=27454 uid=0 auid=0 ses=257382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634501.627:4238092): pid=27454 uid=0 auid=0 ses=257382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634501.627:4238093): pid=27456 uid=0 auid=1055 ses=257380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634501.638:4238094): pid=27455 uid=0 auid=0 ses=257381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634501.837:4238095): pid=27454 uid=0 auid=0 ses=257382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634501.880:4238096): pid=27454 uid=0 auid=0 ses=257382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634502.370:4238097): pid=27456 uid=0 auid=1055 ses=257380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634502.372:4238098): pid=27456 uid=0 auid=1055 ses=257380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634505.283:4238099): pid=27455 uid=0 auid=0 ses=257381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634505.284:4238100): pid=27455 uid=0 auid=0 ses=257381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674634556.569:4238101): avc: denied { read } for pid=27718 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674634556.569:4238101): avc: denied { open } for pid=27718 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634556.569:4238101): arch=c000003e syscall=2 success=yes exit=18 a0=559f77e72f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=27718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634556.569:4238101): proctitle="dovecot/auth"
type=AVC msg=audit(1674634556.569:4238102): avc: denied { getattr } for pid=27718 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634556.569:4238102): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc8ecddeb0 a2=7ffc8ecddeb0 a3=fffffc00 items=0 ppid=5547 pid=27718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634556.569:4238102): proctitle="dovecot/auth"
type=AVC msg=audit(1674634558.528:4238103): avc: denied { name_connect } for pid=27718 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674634558.528:4238103): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc8ecddca0 a2=10 a3=7ffc8ecddc9c items=0 ppid=5547 pid=27718 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634558.528:4238103): proctitle="dovecot/auth"
type=AVC msg=audit(1674634558.567:4238104): avc: denied { write } for pid=27730 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674634558.567:4238104): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffe27d2690 a2=6e a3=63d0e53e items=0 ppid=5547 pid=27730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634558.567:4238104): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674634561.307:4238105): pid=27747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634561.307:4238106): pid=27747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634561.308:4238107): pid=27747 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257383 res=1
type=USER_START msg=audit(1674634561.329:4238108): pid=27747 uid=0 auid=1055 ses=257383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634561.332:4238109): pid=27747 uid=0 auid=1055 ses=257383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634561.617:4238110): pid=27747 uid=0 auid=1055 ses=257383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634561.620:4238111): pid=27747 uid=0 auid=1055 ses=257383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674634577.053:4238112): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674634577.053:4238112): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b7b69c99010 items=0 ppid=27809 pid=27814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634577.053:4238112): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3230392E33382E323130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365430
type=NETFILTER_CFG msg=audit(1674634598.494:4238113): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674634598.494:4238113): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b1443158010 items=0 ppid=27937 pid=27942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634598.494:4238113): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E32322E3138362E313135002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674634599.178:4238114): avc: denied { write } for pid=27730 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674634599.178:4238114): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffe27d2690 a2=6e a3=63d0e567 items=0 ppid=5547 pid=27730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634599.178:4238114): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674634621.637:4238115): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634621.638:4238116): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634621.638:4238117): pid=28030 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257384 res=1
type=USER_START msg=audit(1674634621.656:4238118): pid=28030 uid=0 auid=1055 ses=257384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634621.657:4238119): pid=28030 uid=0 auid=1055 ses=257384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634621.989:4238120): pid=28030 uid=0 auid=1055 ses=257384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634621.994:4238121): pid=28030 uid=0 auid=1055 ses=257384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674634622.566:4238122): avc: denied { name_connect } for pid=27718 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674634622.566:4238122): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc8ecddca0 a2=10 a3=7ffc8ecddc9c items=0 ppid=5547 pid=27718 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634622.566:4238122): proctitle="dovecot/auth"
type=AVC msg=audit(1674634643.943:4238123): avc: denied { read append } for pid=28111 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674634643.943:4238123): avc: denied { open } for pid=28111 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634643.943:4238123): arch=c000003e syscall=2 success=yes exit=8 a0=55681274aa60 a1=402 a2=7ffe3aa89320 a3=7ffe3aa88da0 items=0 ppid=5547 pid=28111 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634643.943:4238123): proctitle="dovecot/imap"
type=AVC msg=audit(1674634643.944:4238124): avc: denied { getattr } for pid=28111 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634643.944:4238124): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe3aa89280 a2=7ffe3aa89280 a3=7ffe3aa88ce0 items=0 ppid=5547 pid=28111 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634643.944:4238124): proctitle="dovecot/imap"
type=AVC msg=audit(1674634643.944:4238125): avc: denied { write } for pid=28111 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634643.944:4238125): arch=c000003e syscall=2 success=yes exit=10 a0=55681274f990 a1=2 a2=7ffe3aa89020 a3=7ffe3aa88ae0 items=0 ppid=5547 pid=28111 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634643.944:4238125): proctitle="dovecot/imap"
type=AVC msg=audit(1674634643.944:4238126): avc: denied { lock } for pid=28111 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634643.944:4238126): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe3aa88f20 a3=63d0e593 items=0 ppid=5547 pid=28111 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634643.944:4238126): proctitle="dovecot/imap"
type=AVC msg=audit(1674634643.944:4238127): avc: denied { read } for pid=28111 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674634643.944:4238127): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=556812778300 a2=90800 a3=0 items=0 ppid=5547 pid=28111 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634643.944:4238127): proctitle="dovecot/imap"
type=AVC msg=audit(1674634643.945:4238128): avc: denied { getattr } for pid=28111 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634643.945:4238128): arch=c000003e syscall=4 success=yes exit=0 a0=55681273aa60 a1=7ffe3aa892d0 a2=7ffe3aa892d0 a3=6f632e6f72676173 items=0 ppid=5547 pid=28111 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634643.945:4238128): proctitle="dovecot/imap"
type=AVC msg=audit(1674634647.265:4238129): avc: denied { write } for pid=28144 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674634647.265:4238129): arch=c000003e syscall=21 success=yes exit=0 a0=55b243f244c0 a1=2 a2=7b48 a3=7ffce56f7a20 items=0 ppid=5547 pid=28144 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634647.265:4238129): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674634682.018:4238130): pid=28262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634682.018:4238131): pid=28262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634682.018:4238132): pid=28262 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257385 res=1
type=USER_START msg=audit(1674634682.044:4238133): pid=28262 uid=0 auid=1055 ses=257385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634682.050:4238134): pid=28262 uid=0 auid=1055 ses=257385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634682.404:4238135): pid=28262 uid=0 auid=1055 ses=257385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634682.405:4238136): pid=28262 uid=0 auid=1055 ses=257385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674634741.430:4238137): pid=28594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634741.430:4238138): pid=28594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634741.434:4238139): pid=28594 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257386 res=1
type=USER_START msg=audit(1674634741.472:4238140): pid=28594 uid=0 auid=1055 ses=257386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634741.473:4238141): pid=28594 uid=0 auid=1055 ses=257386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634741.911:4238142): pid=28594 uid=0 auid=1055 ses=257386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634741.918:4238143): pid=28594 uid=0 auid=1055 ses=257386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674634747.210:4238144): avc: denied { write } for pid=27730 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674634747.210:4238144): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffe27d2690 a2=6e a3=63d0e5fb items=0 ppid=5547 pid=27730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634747.210:4238144): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674634801.951:4238145): pid=28836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634801.951:4238146): pid=28836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634801.951:4238147): pid=28836 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257387 res=1
type=USER_ACCT msg=audit(1674634801.971:4238148): pid=28841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634801.971:4238149): pid=28841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634801.971:4238150): pid=28841 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257388 res=1
type=USER_ACCT msg=audit(1674634801.992:4238151): pid=28839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634801.992:4238152): pid=28839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634801.992:4238153): pid=28839 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257389 res=1
type=USER_ACCT msg=audit(1674634801.992:4238154): pid=28837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634801.992:4238155): pid=28837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634801.992:4238156): pid=28837 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257390 res=1
type=USER_START msg=audit(1674634802.107:4238157): pid=28841 uid=0 auid=1055 ses=257388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674634802.107:4238158): pid=28836 uid=0 auid=0 ses=257387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674634802.111:4238159): pid=28839 uid=0 auid=0 ses=257389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674634802.112:4238160): pid=28837 uid=0 auid=0 ses=257390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634802.114:4238161): pid=28839 uid=0 auid=0 ses=257389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634802.114:4238162): pid=28836 uid=0 auid=0 ses=257387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634802.115:4238163): pid=28841 uid=0 auid=1055 ses=257388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634802.115:4238164): pid=28837 uid=0 auid=0 ses=257390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634802.212:4238165): pid=28836 uid=0 auid=0 ses=257387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634802.217:4238166): pid=28836 uid=0 auid=0 ses=257387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634802.277:4238167): pid=28839 uid=0 auid=0 ses=257389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634802.282:4238168): pid=28839 uid=0 auid=0 ses=257389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634802.535:4238169): pid=28841 uid=0 auid=1055 ses=257388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634802.538:4238170): pid=28841 uid=0 auid=1055 ses=257388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674634802.718:4238171): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674634802.718:4238171): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b316cb37010 items=0 ppid=1588 pid=28868 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.718:4238171): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131302E3138352E3137342E3135342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A32303A3435002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.723:4238172): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674634802.723:4238172): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af5f2680010 items=0 ppid=1588 pid=28869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.723:4238172): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E3139352E32322E3138382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A32373A3338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.728:4238173): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674634802.728:4238173): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b2c60e0a010 items=0 ppid=1588 pid=28870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.728:4238173): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138322E3131392E3233312E3235302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A32373A3535002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.738:4238174): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674634802.738:4238174): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ab716faf010 items=0 ppid=1588 pid=28871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.738:4238174): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E38342E322E37382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A32393A3531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.743:4238175): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674634802.743:4238175): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b895cac8010 items=0 ppid=1588 pid=28872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.743:4238175): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E38372E3230352E3130352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A33323A3537002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.749:4238176): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674634802.749:4238176): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad825ba0010 items=0 ppid=1588 pid=28873 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.749:4238176): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730034352E3132382E3233342E3230312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A33343A3132002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.754:4238177): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674634802.754:4238177): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac63572f010 items=0 ppid=1588 pid=28874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.754:4238177): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E322E32342E3232362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A33343A3236002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.759:4238178): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674634802.759:4238178): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b280279d010 items=0 ppid=1588 pid=28875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.759:4238178): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3138392E3136332E38322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A33343A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.765:4238179): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674634802.765:4238179): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b104fed7010 items=0 ppid=1588 pid=28876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.765:4238179): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232302E3138322E332E3131342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A33363A3439002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.770:4238180): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674634802.770:4238180): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b409b8cc010 items=0 ppid=1588 pid=28877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.770:4238180): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3137332E39332E3232362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A34313A3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.776:4238181): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674634802.776:4238181): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b2af1ef6010 items=0 ppid=1588 pid=28878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.776:4238181): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131392E36322E3231322E3136342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A34333A3134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.781:4238182): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674634802.781:4238182): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ba4b5ab7010 items=0 ppid=1588 pid=28879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.781:4238182): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E31302E3139352E3232332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A34363A3033002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.788:4238183): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674634802.788:4238183): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ab2f1694010 items=0 ppid=1588 pid=28880 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.788:4238183): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131372E3133312E33392E33302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430373A35343A3330002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.794:4238184): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674634802.794:4238184): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b451fd7c010 items=0 ppid=1588 pid=28881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.794:4238184): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3137352E3231302E3135342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A30323A3136002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.800:4238185): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674634802.800:4238185): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2afe07907010 items=0 ppid=1588 pid=28882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.800:4238185): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132302E37312E3232342E39322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A31353A3033002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.805:4238186): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674634802.805:4238186): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af11b610010 items=0 ppid=1588 pid=28883 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.805:4238186): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3137342E3139322E3234302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A31353A3133002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.811:4238187): table=filter family=2 entries=1024
type=SYSCALL msg=audit(1674634802.811:4238187): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1dff0cb010 items=0 ppid=1588 pid=28884 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.811:4238187): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131352E34362E38382E36382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A31373A3331002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.817:4238188): table=filter family=2 entries=1023
type=SYSCALL msg=audit(1674634802.817:4238188): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b2074417010 items=0 ppid=1588 pid=28885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.817:4238188): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232332E3234312E3139372E3130322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A31383A3232002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674634802.822:4238189): table=filter family=2 entries=1022
type=SYSCALL msg=audit(1674634802.822:4238189): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aac1632a010 items=0 ppid=1588 pid=28886 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634802.822:4238189): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3137342E3131382E3132332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A31393A3039002D6A0044524F50
type=CRED_DISP msg=audit(1674634805.635:4238190): pid=28837 uid=0 auid=0 ses=257390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634805.636:4238191): pid=28837 uid=0 auid=0 ses=257390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674634829.644:4238192): avc: denied { read } for pid=29012 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674634829.644:4238192): avc: denied { open } for pid=29012 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634829.644:4238192): arch=c000003e syscall=2 success=yes exit=18 a0=555cade3ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=29012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634829.644:4238192): proctitle="dovecot/auth"
type=AVC msg=audit(1674634829.645:4238193): avc: denied { getattr } for pid=29012 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634829.645:4238193): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffded222c80 a2=7ffded222c80 a3=fffffc00 items=0 ppid=5547 pid=29012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634829.645:4238193): proctitle="dovecot/auth"
type=AVC msg=audit(1674634831.737:4238194): avc: denied { name_connect } for pid=29012 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674634831.737:4238194): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffded222a70 a2=10 a3=7ffded222a6c items=0 ppid=5547 pid=29012 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634831.737:4238194): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674634832.872:4238195): table=filter family=2 entries=1021
type=SYSCALL msg=audit(1674634832.872:4238195): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ba424244010 items=0 ppid=29025 pid=29031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634832.872:4238195): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131302E35322E3233362E313635002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674634838.946:4238196): avc: denied { write } for pid=29057 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674634838.946:4238196): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd8624e020 a2=6e a3=63d0e656 items=0 ppid=5547 pid=29057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634838.946:4238196): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674634851.633:4238197): avc: denied { name_connect } for pid=29012 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674634851.633:4238197): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffded222a70 a2=10 a3=7ffded222a6c items=0 ppid=5547 pid=29012 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634851.633:4238197): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674634861.661:4238198): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634861.662:4238199): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634861.663:4238200): pid=29147 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257391 res=1
type=USER_START msg=audit(1674634861.704:4238201): pid=29147 uid=0 auid=1055 ses=257391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634861.706:4238202): pid=29147 uid=0 auid=1055 ses=257391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634862.151:4238203): pid=29147 uid=0 auid=1055 ses=257391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634862.158:4238204): pid=29147 uid=0 auid=1055 ses=257391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674634864.981:4238205): pid=29168 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634864.981:4238206): pid=29168 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674634864.981:4238207): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.006:4238208): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.013:4238209): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.013:4238210): pid=29168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.044:4238211): pid=29173 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.045:4238212): pid=29173 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.045:4238213): pid=29173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.069:4238214): pid=29173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.072:4238215): pid=29173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.072:4238216): pid=29173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.098:4238217): pid=29179 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.098:4238218): pid=29179 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.098:4238219): pid=29179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.116:4238220): pid=29179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.120:4238221): pid=29179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.120:4238222): pid=29179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.258:4238223): pid=29185 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.259:4238224): pid=29185 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.259:4238225): pid=29185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.279:4238226): pid=29185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.283:4238227): pid=29185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.283:4238228): pid=29185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.311:4238229): pid=29190 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.311:4238230): pid=29190 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.311:4238231): pid=29190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.332:4238232): pid=29190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.336:4238233): pid=29190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.336:4238234): pid=29190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.365:4238235): pid=29195 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.365:4238236): pid=29195 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.366:4238237): pid=29195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.384:4238238): pid=29195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.387:4238239): pid=29195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.388:4238240): pid=29195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.422:4238241): pid=29201 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.422:4238242): pid=29201 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.423:4238243): pid=29201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.438:4238244): pid=29201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.441:4238245): pid=29201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.442:4238246): pid=29201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.467:4238247): pid=29206 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.468:4238248): pid=29206 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.468:4238249): pid=29206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.483:4238250): pid=29206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.487:4238251): pid=29206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.487:4238252): pid=29206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.515:4238253): pid=29211 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.515:4238254): pid=29211 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.516:4238255): pid=29211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.531:4238256): pid=29211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.534:4238257): pid=29211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.535:4238258): pid=29211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.562:4238259): pid=29216 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.562:4238260): pid=29216 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.562:4238261): pid=29216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.585:4238262): pid=29216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.588:4238263): pid=29216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.588:4238264): pid=29216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634865.616:4238265): pid=29222 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634865.617:4238266): pid=29222 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634865.617:4238267): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634865.639:4238268): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634865.643:4238269): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634865.643:4238270): pid=29222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634867.264:4238271): pid=29235 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634867.264:4238272): pid=29235 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634867.265:4238273): pid=29235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634867.282:4238274): pid=29235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634867.345:4238275): pid=29235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634867.346:4238276): pid=29235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634867.384:4238277): pid=29242 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634867.384:4238278): pid=29242 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634867.385:4238279): pid=29242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634867.406:4238280): pid=29242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634867.497:4238281): pid=29242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634867.498:4238282): pid=29242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634867.530:4238283): pid=29248 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634867.531:4238284): pid=29248 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F75736572735F66656174757265735F73657474696E677320757365722D313D706D637265736F757263657320757365722D323D7368616C696E696A616D657320757365722D333D7777777465737475676F20757365722D343D76666D61737365747320757365722D353D776F6F647065636B20757365722D363D7777776B6170696E20757365722D373D646973706F7365617420757365722D383D72656D797361677220757365722D393D7777776B6D616F726720757365722D31303D6D7273636C65616E20757365722D31313D7777776E6578696469676974616C20757365722D31323D6B6F74746179616D63616C6C6472697620757365722D31333D70686D6574616C7320757365722D31343D70616C636F31323320757365722D31353D6769667465726D616E20757365722D31363D7374726169676874637572766520757365722D31373D7777776C6574737374616C6B666F6F6420757365722D31383D77777765766D686F6E646120757365722D31393D626F6E696661636567726F757020757365722D32303D6C61756E647279626F6E696661636520757365722D32313D61327A67726F757020757365722D32323D6461727473696D7020757365722D32333D7777776B61726574616B65727320757365722D32343D636F6368696E7461786920757365722D32353D75676F7473636F6D20757365722D32363D7777777265736F7572636568756E746520757365722D32373D6B6572616C61686F6C6920757365722D32383D777777726D73776C6C20757365722D32393D74726176656C626F6E696661636520757365722D33303D777777706D637265736F7572636520666561747572652D313D66696C656D616E6167657220666561747572652D323D6261636B757020666561747572652D333D63726F6E20666561747572652D343D7068706D7961646D696E20666561747572652D353D6D7973716C20666561747572652D363D6D756C746970687020666561747572652D373D6164646F6E646F6D61696E7320666561747572652D383D737562646F6D61696E7320666561747572652D393D77656270726F7465637420666561747572652D31303D73736C696E7374616C6C20666561747572652D31313D77702D746F6F6C6B697420666561747572652D31323D77702D746F6F6C6B69742D64656C757865202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634867.531:4238285): pid=29248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634867.553:4238286): pid=29248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634867.680:4238287): pid=29248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634867.680:4238288): pid=29248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634867.727:4238289): pid=29254 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634867.727:4238290): pid=29254 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674634867.727:4238291): pid=29254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634867.747:4238292): pid=29254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634867.751:4238293): pid=29254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634867.751:4238294): pid=29254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634867.779:4238295): pid=29259 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634867.780:4238296): pid=29259 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6E72347069375A77344A584B5957574C2E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674634867.780:4238297): pid=29259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634867.802:4238298): pid=29259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634867.806:4238299): pid=29259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634867.807:4238300): pid=29259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634867.839:4238301): pid=29264 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634867.840:4238302): pid=29264 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6E72347069375A77344A584B5957574C2E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674634867.840:4238303): pid=29264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634867.861:4238304): pid=29264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634867.868:4238305): pid=29264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634867.868:4238306): pid=29264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634867.898:4238307): pid=29270 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634867.898:4238308): pid=29270 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6E72347069375A77344A584B5957574C2E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674634867.899:4238309): pid=29270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634867.927:4238310): pid=29270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634867.933:4238311): pid=29270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634867.933:4238312): pid=29270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634867.966:4238313): pid=29275 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634867.966:4238314): pid=29275 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674634867.966:4238315): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634867.989:4238316): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634867.996:4238317): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634867.996:4238318): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634868.386:4238319): pid=29281 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634868.387:4238320): pid=29281 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674634868.387:4238321): pid=29281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634868.403:4238322): pid=29281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634868.406:4238323): pid=29281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634868.406:4238324): pid=29281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634868.917:4238325): pid=29291 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634868.917:4238326): pid=29291 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674634868.917:4238327): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634868.933:4238328): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634868.937:4238329): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634868.937:4238330): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634868.963:4238331): pid=29294 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634868.964:4238332): pid=29294 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674634868.964:4238333): pid=29294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634868.981:4238334): pid=29294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634868.985:4238335): pid=29294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634868.985:4238336): pid=29294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634869.014:4238337): pid=29298 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634869.014:4238338): pid=29298 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674634869.014:4238339): pid=29298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634869.035:4238340): pid=29298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634869.039:4238341): pid=29298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634869.039:4238342): pid=29298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634869.074:4238343): pid=29304 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634869.075:4238344): pid=29304 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634869.075:4238345): pid=29304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634869.090:4238346): pid=29304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634869.224:4238347): pid=29304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634869.225:4238348): pid=29304 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634870.116:4238349): pid=29312 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634870.117:4238350): pid=29312 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634870.117:4238351): pid=29312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634870.139:4238352): pid=29312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634870.203:4238353): pid=29312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634870.203:4238354): pid=29312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634870.235:4238355): pid=29317 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634870.235:4238356): pid=29317 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674634870.235:4238357): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634870.252:4238358): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634871.493:4238359): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634871.493:4238360): pid=29317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634871.713:4238361): pid=29332 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634871.713:4238362): pid=29332 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674634871.713:4238363): pid=29332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634871.732:4238364): pid=29332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634873.063:4238365): pid=29332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634873.064:4238366): pid=29332 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634873.298:4238367): pid=29344 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634873.298:4238368): pid=29344 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634873.298:4238369): pid=29344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634873.313:4238370): pid=29344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634875.345:4238371): pid=29344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634875.345:4238372): pid=29344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634875.733:4238373): pid=29359 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634875.733:4238374): pid=29359 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674634875.734:4238375): pid=29359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634875.757:4238376): pid=29359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634878.147:4238377): pid=29359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634878.147:4238378): pid=29359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634878.264:4238379): pid=29380 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634878.264:4238380): pid=29380 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674634878.265:4238381): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634878.286:4238382): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634878.737:4238383): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634878.737:4238384): pid=29380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634878.890:4238385): pid=29389 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634878.891:4238386): pid=29389 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F485950452026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F48595045202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674634878.891:4238387): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634878.906:4238388): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634881.084:4238389): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634881.084:4238390): pid=29389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634881.431:4238391): pid=29411 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634881.431:4238392): pid=29411 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674634881.432:4238393): pid=29411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634881.452:4238394): pid=29411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634882.696:4238395): pid=29411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634882.696:4238396): pid=29411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634882.934:4238397): pid=29423 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634882.935:4238398): pid=29423 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674634882.935:4238399): pid=29423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634882.956:4238400): pid=29423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634884.176:4238401): pid=29423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634884.176:4238402): pid=29423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634885.176:4238403): pid=29439 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674634885.176:4238404): pid=29439 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674634885.176:4238405): pid=29439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674634885.191:4238406): pid=29439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674634886.351:4238407): pid=29439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674634886.351:4238408): pid=29439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674634921.178:4238409): pid=29586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634921.179:4238410): pid=29586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634921.180:4238411): pid=29586 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257392 res=1
type=USER_START msg=audit(1674634921.197:4238412): pid=29586 uid=0 auid=1055 ses=257392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634921.199:4238413): pid=29586 uid=0 auid=1055 ses=257392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634921.502:4238414): pid=29586 uid=0 auid=1055 ses=257392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634921.505:4238415): pid=29586 uid=0 auid=1055 ses=257392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674634971.992:4238416): avc: denied { read } for pid=29782 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674634971.992:4238416): avc: denied { open } for pid=29782 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634971.992:4238416): arch=c000003e syscall=2 success=yes exit=18 a0=55ae3eaa6f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=29782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634971.992:4238416): proctitle="dovecot/auth"
type=AVC msg=audit(1674634971.992:4238417): avc: denied { getattr } for pid=29782 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674634971.992:4238417): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc7ef0d410 a2=7ffc7ef0d410 a3=fffffc00 items=0 ppid=5547 pid=29782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634971.992:4238417): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674634981.533:4238418): pid=29815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674634981.533:4238419): pid=29815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674634981.534:4238420): pid=29815 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257393 res=1
type=USER_START msg=audit(1674634981.553:4238421): pid=29815 uid=0 auid=1055 ses=257393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674634981.554:4238422): pid=29815 uid=0 auid=1055 ses=257393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674634981.917:4238423): pid=29815 uid=0 auid=1055 ses=257393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674634981.920:4238424): pid=29815 uid=0 auid=1055 ses=257393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674634982.823:4238425): avc: denied { write } for pid=29791 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674634982.823:4238425): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe645dfdd0 a2=6e a3=63d0e6e6 items=0 ppid=5547 pid=29791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674634982.823:4238425): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674634998.080:4238426): pid=29892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674634998.080:4238427): pid=29892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674634998.080:4238428): pid=29892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674634998.293:4238429): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=29892 suid=74 rport=42290 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=169.228.66.212 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674634998.293:4238430): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=29892 suid=74 rport=42290 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=169.228.66.212 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635008.064:4238431): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29892 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635008.064:4238432): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29892 suid=74 rport=42290 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=169.228.66.212 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635008.065:4238433): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635008.065:4238434): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635008.065:4238435): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674635008.065:4238436): pid=29889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=169.228.66.212 terminal=ssh res=failed'
type=AVC msg=audit(1674635019.252:4238437): avc: denied { name_connect } for pid=29782 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674635019.252:4238437): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffc7ef0d200 a2=10 a3=7ffc7ef0d1fc items=0 ppid=5547 pid=29782 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635019.252:4238437): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674635041.949:4238438): pid=30158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635041.950:4238439): pid=30158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635041.951:4238440): pid=30158 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257394 res=1
type=USER_START msg=audit(1674635041.979:4238441): pid=30158 uid=0 auid=1055 ses=257394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635041.991:4238442): pid=30158 uid=0 auid=1055 ses=257394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635042.351:4238443): pid=30158 uid=0 auid=1055 ses=257394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635042.354:4238444): pid=30158 uid=0 auid=1055 ses=257394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635101.371:4238445): pid=30380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635101.371:4238446): pid=30380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635101.371:4238447): pid=30379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635101.371:4238448): pid=30380 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257395 res=1
type=CRED_ACQ msg=audit(1674635101.372:4238449): pid=30379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635101.372:4238450): pid=30379 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257396 res=1
type=USER_ACCT msg=audit(1674635101.383:4238451): pid=30378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635101.383:4238452): pid=30378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635101.383:4238453): pid=30378 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257397 res=1
type=USER_START msg=audit(1674635101.426:4238454): pid=30380 uid=0 auid=1055 ses=257395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635101.427:4238455): pid=30379 uid=0 auid=0 ses=257396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635101.428:4238456): pid=30378 uid=0 auid=0 ses=257397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635101.429:4238457): pid=30380 uid=0 auid=1055 ses=257395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635101.429:4238458): pid=30379 uid=0 auid=0 ses=257396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635101.430:4238459): pid=30378 uid=0 auid=0 ses=257397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635101.657:4238460): pid=30378 uid=0 auid=0 ses=257397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635101.662:4238461): pid=30378 uid=0 auid=0 ses=257397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635101.867:4238462): pid=30380 uid=0 auid=1055 ses=257395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635101.882:4238463): pid=30380 uid=0 auid=1055 ses=257395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635104.809:4238464): pid=30379 uid=0 auid=0 ses=257396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635104.810:4238465): pid=30379 uid=0 auid=0 ses=257396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674635113.328:4238466): avc: denied { name_connect } for pid=29782 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674635113.328:4238466): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc7ef0d200 a2=10 a3=7ffc7ef0d1fc items=0 ppid=5547 pid=29782 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635113.328:4238466): proctitle="dovecot/auth"
type=AVC msg=audit(1674635113.373:4238467): avc: denied { write } for pid=30439 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674635113.373:4238467): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc90217440 a2=6e a3=63d0e769 items=0 ppid=5547 pid=30439 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635113.373:4238467): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674635161.831:4238468): pid=30641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635161.832:4238469): pid=30641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635161.833:4238470): pid=30641 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257398 res=1
type=USER_START msg=audit(1674635161.855:4238471): pid=30641 uid=0 auid=1055 ses=257398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635161.869:4238472): pid=30641 uid=0 auid=1055 ses=257398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635162.268:4238473): pid=30641 uid=0 auid=1055 ses=257398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635162.271:4238474): pid=30641 uid=0 auid=1055 ses=257398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674635183.876:4238475): table=filter family=2 entries=1022
type=SYSCALL msg=audit(1674635183.876:4238475): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5229741010 items=0 ppid=30714 pid=30719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635183.876:4238475): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131312E33392E32372E313232002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365430
type=USER_ACCT msg=audit(1674635221.293:4238476): pid=30878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635221.293:4238477): pid=30878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635221.294:4238478): pid=30878 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257399 res=1
type=USER_START msg=audit(1674635221.315:4238479): pid=30878 uid=0 auid=1055 ses=257399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635221.316:4238480): pid=30878 uid=0 auid=1055 ses=257399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635221.587:4238481): pid=30878 uid=0 auid=1055 ses=257399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635221.589:4238482): pid=30878 uid=0 auid=1055 ses=257399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635281.607:4238484): pid=31114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635281.607:4238483): pid=31113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635281.607:4238485): pid=31114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635281.607:4238486): pid=31113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635281.608:4238487): pid=31114 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257400 res=1
type=LOGIN msg=audit(1674635281.608:4238488): pid=31113 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257401 res=1
type=USER_START msg=audit(1674635281.644:4238490): pid=31114 uid=0 auid=1055 ses=257400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635281.644:4238489): pid=31113 uid=0 auid=0 ses=257401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635281.646:4238491): pid=31113 uid=0 auid=0 ses=257401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635281.647:4238492): pid=31114 uid=0 auid=1055 ses=257400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635281.712:4238493): pid=31113 uid=0 auid=0 ses=257401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635281.714:4238494): pid=31113 uid=0 auid=0 ses=257401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635281.984:4238495): pid=31114 uid=0 auid=1055 ses=257400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635281.989:4238496): pid=31114 uid=0 auid=1055 ses=257400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674635290.643:4238497): avc: denied { name_connect } for pid=29782 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674635290.643:4238497): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc7ef0d200 a2=10 a3=7ffc7ef0d1fc items=0 ppid=5547 pid=29782 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635290.643:4238497): proctitle="dovecot/auth"
type=AVC msg=audit(1674635290.659:4238498): avc: denied { write } for pid=30774 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674635290.659:4238498): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd1ff91da0 a2=6e a3=63d0e81a items=0 ppid=5547 pid=30774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635290.659:4238498): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674635342.026:4238499): pid=31350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635342.029:4238500): pid=31350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635342.029:4238501): pid=31350 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257402 res=1
type=USER_START msg=audit(1674635342.054:4238502): pid=31350 uid=0 auid=1055 ses=257402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635342.057:4238503): pid=31350 uid=0 auid=1055 ses=257402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635342.450:4238504): pid=31350 uid=0 auid=1055 ses=257402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635342.453:4238505): pid=31350 uid=0 auid=1055 ses=257402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674635356.431:4238506): table=filter family=2 entries=1023
type=SYSCALL msg=audit(1674635356.431:4238506): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b66fd038010 items=0 ppid=31504 pid=31509 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635356.431:4238506): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3138322E332E313134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365430
type=AVC msg=audit(1674635378.139:4238507): avc: denied { read append } for pid=31607 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674635378.139:4238507): avc: denied { open } for pid=31607 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635378.139:4238507): arch=c000003e syscall=2 success=yes exit=8 a0=564447e71a60 a1=402 a2=7ffe5922f1e0 a3=7ffe5922ec60 items=0 ppid=5547 pid=31607 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635378.139:4238507): proctitle="dovecot/imap"
type=AVC msg=audit(1674635378.139:4238508): avc: denied { getattr } for pid=31607 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635378.139:4238508): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe5922f140 a2=7ffe5922f140 a3=7ffe5922eba0 items=0 ppid=5547 pid=31607 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635378.139:4238508): proctitle="dovecot/imap"
type=AVC msg=audit(1674635378.139:4238509): avc: denied { write } for pid=31607 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635378.139:4238509): arch=c000003e syscall=2 success=yes exit=10 a0=564447e76990 a1=2 a2=7ffe5922eee0 a3=7ffe5922e9a0 items=0 ppid=5547 pid=31607 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635378.139:4238509): proctitle="dovecot/imap"
type=AVC msg=audit(1674635378.139:4238510): avc: denied { lock } for pid=31607 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635378.139:4238510): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe5922ede0 a3=63d0e872 items=0 ppid=5547 pid=31607 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635378.139:4238510): proctitle="dovecot/imap"
type=AVC msg=audit(1674635378.139:4238511): avc: denied { read } for pid=31607 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674635378.139:4238511): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=564447e9f300 a2=90800 a3=0 items=0 ppid=5547 pid=31607 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635378.139:4238511): proctitle="dovecot/imap"
type=AVC msg=audit(1674635378.140:4238512): avc: denied { getattr } for pid=31607 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635378.140:4238512): arch=c000003e syscall=4 success=yes exit=0 a0=564447e61a60 a1=7ffe5922f190 a2=7ffe5922f190 a3=6f632e6f72676173 items=0 ppid=5547 pid=31607 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635378.140:4238512): proctitle="dovecot/imap"
type=AVC msg=audit(1674635379.856:4238513): avc: denied { write } for pid=31613 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674635379.856:4238513): arch=c000003e syscall=21 success=yes exit=0 a0=55c93d5a44c0 a1=2 a2=7b48 a3=7fffb3956860 items=0 ppid=5547 pid=31613 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635379.856:4238513): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674635401.492:4238514): pid=31689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635401.492:4238515): pid=31689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635401.493:4238516): pid=31689 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257403 res=1
type=USER_ACCT msg=audit(1674635401.493:4238517): pid=31686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635401.494:4238518): pid=31686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635401.494:4238519): pid=31686 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257404 res=1
type=USER_ACCT msg=audit(1674635401.504:4238520): pid=31687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635401.504:4238521): pid=31687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635401.504:4238522): pid=31687 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257405 res=1
type=USER_ACCT msg=audit(1674635401.505:4238523): pid=31690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635401.505:4238524): pid=31690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635401.506:4238525): pid=31690 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257406 res=1
type=USER_START msg=audit(1674635401.593:4238526): pid=31689 uid=0 auid=0 ses=257403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635401.593:4238527): pid=31690 uid=0 auid=1055 ses=257406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635401.593:4238528): pid=31687 uid=0 auid=0 ses=257405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635401.593:4238529): pid=31686 uid=0 auid=0 ses=257404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635401.600:4238530): pid=31686 uid=0 auid=0 ses=257404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635401.600:4238531): pid=31690 uid=0 auid=1055 ses=257406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635401.600:4238532): pid=31689 uid=0 auid=0 ses=257403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635401.609:4238533): pid=31687 uid=0 auid=0 ses=257405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635401.661:4238534): pid=31686 uid=0 auid=0 ses=257404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635401.713:4238535): pid=31686 uid=0 auid=0 ses=257404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635401.974:4238536): pid=31690 uid=0 auid=1055 ses=257406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635401.977:4238537): pid=31690 uid=0 auid=1055 ses=257406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635402.545:4238538): pid=31687 uid=0 auid=0 ses=257405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635402.551:4238539): pid=31687 uid=0 auid=0 ses=257405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635405.234:4238540): pid=31689 uid=0 auid=0 ses=257403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635405.235:4238541): pid=31689 uid=0 auid=0 ses=257403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635461.265:4238542): pid=31974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635461.265:4238543): pid=31974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635461.267:4238544): pid=31974 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257407 res=1
type=USER_START msg=audit(1674635461.305:4238545): pid=31974 uid=0 auid=1055 ses=257407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635461.311:4238546): pid=31974 uid=0 auid=1055 ses=257407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635461.705:4238547): pid=31974 uid=0 auid=1055 ses=257407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635461.707:4238548): pid=31974 uid=0 auid=1055 ses=257407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635521.743:4238549): pid=32247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635521.743:4238550): pid=32247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635521.743:4238551): pid=32247 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257408 res=1
type=USER_START msg=audit(1674635521.776:4238552): pid=32247 uid=0 auid=1055 ses=257408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635521.782:4238553): pid=32247 uid=0 auid=1055 ses=257408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635522.252:4238554): pid=32247 uid=0 auid=1055 ses=257408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635522.260:4238555): pid=32247 uid=0 auid=1055 ses=257408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674635527.668:4238556): avc: denied { read } for pid=32280 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674635527.668:4238556): avc: denied { open } for pid=32280 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635527.668:4238556): arch=c000003e syscall=2 success=yes exit=18 a0=558dce987f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=32280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635527.668:4238556): proctitle="dovecot/auth"
type=AVC msg=audit(1674635527.668:4238557): avc: denied { getattr } for pid=32280 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635527.668:4238557): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe144299b0 a2=7ffe144299b0 a3=fffffc00 items=0 ppid=5547 pid=32280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635527.668:4238557): proctitle="dovecot/auth"
type=AVC msg=audit(1674635529.792:4238558): avc: denied { name_connect } for pid=32280 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674635529.792:4238558): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe144297a0 a2=10 a3=7ffe1442979c items=0 ppid=5547 pid=32280 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635529.792:4238558): proctitle="dovecot/auth"
type=AVC msg=audit(1674635529.827:4238559): avc: denied { write } for pid=32289 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674635529.827:4238559): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc127006e0 a2=6e a3=63d0e909 items=0 ppid=5547 pid=32289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635529.827:4238559): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674635581.278:4238560): pid=32492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635581.278:4238561): pid=32492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635581.278:4238562): pid=32492 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257409 res=1
type=USER_START msg=audit(1674635581.295:4238563): pid=32492 uid=0 auid=1055 ses=257409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635581.296:4238564): pid=32492 uid=0 auid=1055 ses=257409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635581.652:4238565): pid=32492 uid=0 auid=1055 ses=257409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635581.654:4238566): pid=32492 uid=0 auid=1055 ses=257409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635641.669:4238567): pid=32725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635641.669:4238568): pid=32725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635641.669:4238569): pid=32725 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257410 res=1
type=USER_START msg=audit(1674635641.685:4238570): pid=32725 uid=0 auid=1055 ses=257410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635641.687:4238571): pid=32725 uid=0 auid=1055 ses=257410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635642.035:4238572): pid=32725 uid=0 auid=1055 ses=257410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635642.036:4238573): pid=32725 uid=0 auid=1055 ses=257410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674635687.493:4238574): avc: denied { name_connect } for pid=489 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674635687.493:4238574): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd56a3bc10 a2=10 a3=7ffd56a3bc0c items=0 ppid=5547 pid=489 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635687.493:4238574): proctitle="dovecot/auth"
type=AVC msg=audit(1674635687.532:4238575): avc: denied { write } for pid=520 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674635687.532:4238575): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff07a5f060 a2=6e a3=63d0e9a7 items=0 ppid=5547 pid=520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635687.532:4238575): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674635695.930:4238576): table=filter family=2 entries=1024
type=SYSCALL msg=audit(1674635695.930:4238576): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2abcbef14010 items=0 ppid=609 pid=616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635695.930:4238576): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3134332E3131352E313339002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674635701.056:4238577): pid=640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635701.056:4238578): pid=636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635701.056:4238579): pid=640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635701.058:4238580): pid=636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635701.060:4238581): pid=640 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257411 res=1
type=USER_ACCT msg=audit(1674635701.060:4238582): pid=641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635701.060:4238583): pid=636 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257412 res=1
type=CRED_ACQ msg=audit(1674635701.060:4238584): pid=641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635701.060:4238585): pid=641 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257413 res=1
type=USER_ACCT msg=audit(1674635701.073:4238586): pid=637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635701.073:4238587): pid=637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635701.077:4238588): pid=637 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257414 res=1
type=USER_START msg=audit(1674635701.149:4238589): pid=636 uid=0 auid=0 ses=257412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635701.151:4238590): pid=637 uid=0 auid=0 ses=257414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635701.151:4238591): pid=640 uid=0 auid=0 ses=257411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635701.151:4238592): pid=641 uid=0 auid=1055 ses=257413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635701.153:4238593): pid=641 uid=0 auid=1055 ses=257413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635701.153:4238594): pid=637 uid=0 auid=0 ses=257414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635701.153:4238595): pid=640 uid=0 auid=0 ses=257411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635701.154:4238596): pid=636 uid=0 auid=0 ses=257412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635701.277:4238597): pid=637 uid=0 auid=0 ses=257414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635701.329:4238598): pid=637 uid=0 auid=0 ses=257414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635701.329:4238599): pid=640 uid=0 auid=0 ses=257411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635701.336:4238600): pid=640 uid=0 auid=0 ses=257411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635701.816:4238601): pid=641 uid=0 auid=1055 ses=257413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635701.819:4238602): pid=641 uid=0 auid=1055 ses=257413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635704.602:4238603): pid=636 uid=0 auid=0 ses=257412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635704.604:4238604): pid=636 uid=0 auid=0 ses=257412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674635706.289:4238605): avc: denied { write } for pid=520 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674635706.289:4238605): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff07a5f060 a2=6e a3=63d0e9ba items=0 ppid=5547 pid=520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635706.289:4238605): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674635716.873:4238606): pid=744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635716.873:4238607): pid=744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635716.874:4238608): pid=744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674635716.992:4238609): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=744 suid=74 rport=54123 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674635716.992:4238610): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=744 suid=74 rport=54123 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=? res=success'
type=USER_AUTH msg=audit(1674635717.660:4238611): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=49.143.43.88 addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635719.691:4238612): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635719.940:4238613): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635720.253:4238614): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=49.143.43.88 addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635722.030:4238615): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635722.367:4238616): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=49.143.43.88 addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635724.751:4238617): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635725.083:4238618): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=49.143.43.88 addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635726.544:4238619): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635726.936:4238620): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=49.143.43.88 addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635728.869:4238621): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635728.869:4238622): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=maxtries exceeded acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674635728.869:4238623): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=744 suid=74 rport=54123 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635728.870:4238624): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=744 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635728.871:4238625): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635728.871:4238626): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635728.871:4238627): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674635728.871:4238628): pid=743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674635729.261:4238629): pid=806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635729.262:4238630): pid=806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635729.262:4238631): pid=806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674635729.383:4238632): pid=805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=806 suid=74 rport=54241 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674635729.383:4238633): pid=805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=806 suid=74 rport=54241 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=? res=success'
type=USER_AUTH msg=audit(1674635729.998:4238634): pid=805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=49.143.43.88 addr=49.143.43.88 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674635730.220:4238635): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674635730.220:4238635): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f781ee44010 items=0 ppid=830 pid=844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635730.220:4238635): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674635730.225:4238636): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674635730.225:4238636): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdd812a5010 items=0 ppid=830 pid=845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635730.225:4238636): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674635730.230:4238637): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674635730.230:4238637): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f11adb45010 items=0 ppid=830 pid=846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635730.230:4238637): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674635730.236:4238638): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674635730.236:4238638): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff58296d010 items=0 ppid=830 pid=847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635730.236:4238638): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674635730.581:4238639): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674635730.581:4238639): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f54f930a010 items=0 ppid=830 pid=855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635730.581:4238639): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003139332E3131302E3130302E323238002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674635730.588:4238640): table=filter family=2 entries=1024
type=SYSCALL msg=audit(1674635730.588:4238640): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa2a68e2010 items=0 ppid=830 pid=856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635730.588:4238640): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003139332E3131302E3130302E323238002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674635730.597:4238641): table=filter family=2 entries=1023
type=SYSCALL msg=audit(1674635730.597:4238641): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc35a276010 items=0 ppid=830 pid=857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635730.597:4238641): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034392E3134332E34332E3838002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674635730.604:4238642): table=filter family=2 entries=1024
type=SYSCALL msg=audit(1674635730.604:4238642): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc756000010 items=0 ppid=830 pid=858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635730.604:4238642): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034392E3134332E34332E3838002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674635732.011:4238643): pid=805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=49.143.43.88 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674635761.630:4238644): pid=978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635761.630:4238645): pid=978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635761.631:4238646): pid=978 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257415 res=1
type=USER_START msg=audit(1674635761.655:4238647): pid=978 uid=0 auid=1055 ses=257415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635761.658:4238648): pid=978 uid=0 auid=1055 ses=257415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635761.973:4238649): pid=978 uid=0 auid=1055 ses=257415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635761.984:4238650): pid=978 uid=0 auid=1055 ses=257415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674635793.575:4238651): avc: denied { name_connect } for pid=489 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674635793.575:4238651): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd56a3bc10 a2=10 a3=7ffd56a3bc0c items=0 ppid=5547 pid=489 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635793.575:4238651): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674635794.699:4238652): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674635794.699:4238652): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b82f0521010 items=0 ppid=1121 pid=1126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635794.699:4238652): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E39312E3138352E313632002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674635812.708:4238653): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674635812.708:4238653): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af7ec9d4010 items=0 ppid=1196 pid=1202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635812.708:4238653): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131362E3233332E3230332E3737002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674635822.012:4238654): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635822.014:4238655): pid=1236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635822.023:4238656): pid=1236 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257416 res=1
type=USER_START msg=audit(1674635822.038:4238657): pid=1236 uid=0 auid=1055 ses=257416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635822.041:4238658): pid=1236 uid=0 auid=1055 ses=257416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635822.294:4238659): pid=1236 uid=0 auid=1055 ses=257416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635822.296:4238660): pid=1236 uid=0 auid=1055 ses=257416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635881.311:4238661): pid=1470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635881.311:4238662): pid=1470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635881.312:4238663): pid=1470 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257417 res=1
type=USER_START msg=audit(1674635881.326:4238664): pid=1470 uid=0 auid=1055 ses=257417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635881.328:4238665): pid=1470 uid=0 auid=1055 ses=257417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635881.675:4238666): pid=1470 uid=0 auid=1055 ses=257417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635881.684:4238667): pid=1470 uid=0 auid=1055 ses=257417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674635922.445:4238668): avc: denied { read } for pid=1658 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674635922.445:4238668): avc: denied { open } for pid=1658 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635922.445:4238668): arch=c000003e syscall=2 success=yes exit=18 a0=55d7f3178f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635922.445:4238668): proctitle="dovecot/auth"
type=AVC msg=audit(1674635922.445:4238669): avc: denied { getattr } for pid=1658 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674635922.445:4238669): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffebb0bd040 a2=7ffebb0bd040 a3=fffffc00 items=0 ppid=5547 pid=1658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635922.445:4238669): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674635922.770:4238670): pid=1659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635922.770:4238671): pid=1659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635922.770:4238672): pid=1659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1659 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674635922.822:4238673): avc: denied { name_connect } for pid=1658 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674635922.822:4238673): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffebb0bce30 a2=10 a3=7ffebb0bce2c items=0 ppid=5547 pid=1658 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635922.822:4238673): proctitle="dovecot/auth"
type=AVC msg=audit(1674635922.855:4238674): avc: denied { write } for pid=1661 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674635922.855:4238674): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe900844e0 a2=6e a3=63d0ea92 items=0 ppid=5547 pid=1661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635922.855:4238674): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_SESSION msg=audit(1674635922.986:4238675): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=1659 suid=74 rport=53325 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.55.24 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674635922.986:4238676): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=1659 suid=74 rport=53325 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.55.24 terminal=? res=success'
type=USER_AUTH msg=audit(1674635924.828:4238677): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.126.55.24 addr=59.126.55.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635926.610:4238678): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.55.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635927.930:4238679): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.126.55.24 addr=59.126.55.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635929.792:4238680): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.55.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635930.409:4238681): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.55.24 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674635930.649:4238682): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1659 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635930.649:4238683): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1659 suid=74 rport=53325 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.55.24 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635930.651:4238684): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635930.651:4238685): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635930.651:4238686): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674635930.651:4238687): pid=1653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.55.24 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674635941.709:4238688): pid=1744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635941.710:4238689): pid=1744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674635941.710:4238690): pid=1743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674635941.710:4238691): pid=1743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674635941.711:4238693): pid=1743 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257418 res=1
type=LOGIN msg=audit(1674635941.711:4238692): pid=1744 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257419 res=1
type=USER_START msg=audit(1674635941.843:4238694): pid=1744 uid=0 auid=1055 ses=257419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674635941.848:4238695): pid=1743 uid=0 auid=0 ses=257418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635941.849:4238696): pid=1744 uid=0 auid=1055 ses=257419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674635941.852:4238697): pid=1743 uid=0 auid=0 ses=257418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635942.349:4238698): pid=1744 uid=0 auid=1055 ses=257419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635942.360:4238699): pid=1744 uid=0 auid=1055 ses=257419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674635943.820:4238700): pid=1743 uid=0 auid=0 ses=257418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674635943.823:4238701): pid=1743 uid=0 auid=0 ses=257418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674635966.585:4238702): pid=1904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635966.586:4238703): pid=1904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635966.586:4238704): pid=1904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674635967.029:4238705): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1904 suid=74 rport=45552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674635967.029:4238706): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1904 suid=74 rport=45552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674635967.726:4238707): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674635969.744:4238708): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674635970.005:4238709): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1904 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635970.005:4238710): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1904 suid=74 rport=45552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635970.007:4238711): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635970.007:4238712): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674635970.007:4238713): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1881 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674635970.007:4238714): pid=1881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=AVC msg=audit(1674635977.504:4238715): avc: denied { name_connect } for pid=1658 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674635977.504:4238715): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffebb0bce30 a2=10 a3=7ffebb0bce2c items=0 ppid=5547 pid=1658 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635977.504:4238715): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674635978.612:4238716): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674635978.612:4238716): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae947ae1010 items=0 ppid=1950 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635978.612:4238716): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E39302E3234322E313836002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674635987.337:4238717): avc: denied { write } for pid=1982 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674635987.337:4238717): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb51f2930 a2=6e a3=63d0ead3 items=0 ppid=5547 pid=1982 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674635987.337:4238717): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674636001.866:4238718): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636001.866:4238719): pid=2141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636001.867:4238720): pid=2141 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257420 res=1
type=USER_ACCT msg=audit(1674636001.876:4238721): pid=2138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636001.876:4238722): pid=2138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636001.877:4238723): pid=2138 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257421 res=1
type=USER_ACCT msg=audit(1674636001.880:4238724): pid=2140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636001.880:4238725): pid=2140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636001.881:4238726): pid=2140 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257422 res=1
type=USER_START msg=audit(1674636001.977:4238727): pid=2140 uid=0 auid=0 ses=257422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636001.981:4238728): pid=2140 uid=0 auid=0 ses=257422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636001.982:4238729): pid=2138 uid=0 auid=0 ses=257421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636001.982:4238730): pid=2141 uid=0 auid=1055 ses=257420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636001.984:4238731): pid=2138 uid=0 auid=0 ses=257421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636002.002:4238732): pid=2141 uid=0 auid=1055 ses=257420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636002.104:4238733): pid=2138 uid=0 auid=0 ses=257421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636002.116:4238734): pid=2138 uid=0 auid=0 ses=257421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636002.587:4238735): pid=2141 uid=0 auid=1055 ses=257420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636002.621:4238736): pid=2141 uid=0 auid=1055 ses=257420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636005.499:4238737): pid=2140 uid=0 auid=0 ses=257422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636005.500:4238738): pid=2140 uid=0 auid=0 ses=257422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636061.528:4238739): pid=2381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636061.529:4238740): pid=2381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636061.529:4238741): pid=2381 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257423 res=1
type=USER_START msg=audit(1674636061.614:4238742): pid=2381 uid=0 auid=1055 ses=257423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636061.616:4238743): pid=2381 uid=0 auid=1055 ses=257423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636062.011:4238744): pid=2381 uid=0 auid=1055 ses=257423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636062.019:4238745): pid=2381 uid=0 auid=1055 ses=257423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636106.357:4238746): avc: denied { name_connect } for pid=1658 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674636106.357:4238746): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffebb0bce30 a2=10 a3=7ffebb0bce2c items=0 ppid=5547 pid=1658 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636106.357:4238746): proctitle="dovecot/auth"
type=AVC msg=audit(1674636106.398:4238747): avc: denied { write } for pid=2563 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674636106.398:4238747): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff6b6969e0 a2=6e a3=63d0eb4a items=0 ppid=5547 pid=2563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636106.398:4238747): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674636121.038:4238748): pid=2616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636121.038:4238749): pid=2616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636121.038:4238750): pid=2616 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257424 res=1
type=USER_START msg=audit(1674636121.056:4238751): pid=2616 uid=0 auid=1055 ses=257424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636121.058:4238752): pid=2616 uid=0 auid=1055 ses=257424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636121.301:4238753): pid=2616 uid=0 auid=1055 ses=257424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636121.303:4238754): pid=2616 uid=0 auid=1055 ses=257424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636181.317:4238755): pid=2869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636181.317:4238756): pid=2869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636181.317:4238757): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636181.317:4238758): pid=2869 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257425 res=1
type=CRED_ACQ msg=audit(1674636181.317:4238759): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636181.317:4238760): pid=2868 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257426 res=1
type=USER_START msg=audit(1674636181.353:4238761): pid=2868 uid=0 auid=0 ses=257426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636181.354:4238762): pid=2869 uid=0 auid=1055 ses=257425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636181.356:4238763): pid=2868 uid=0 auid=0 ses=257426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636181.357:4238764): pid=2869 uid=0 auid=1055 ses=257425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636181.415:4238765): pid=2868 uid=0 auid=0 ses=257426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636181.417:4238766): pid=2868 uid=0 auid=0 ses=257426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636181.642:4238767): pid=2869 uid=0 auid=1055 ses=257425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636181.645:4238768): pid=2869 uid=0 auid=1055 ses=257425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636241.662:4238769): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636241.662:4238770): pid=3121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636241.662:4238771): pid=3121 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257427 res=1
type=USER_START msg=audit(1674636241.687:4238772): pid=3121 uid=0 auid=1055 ses=257427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636241.689:4238773): pid=3121 uid=0 auid=1055 ses=257427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636242.080:4238774): pid=3121 uid=0 auid=1055 ses=257427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636242.083:4238775): pid=3121 uid=0 auid=1055 ses=257427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636276.334:4238776): avc: denied { read } for pid=3277 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674636276.334:4238776): avc: denied { open } for pid=3277 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636276.334:4238776): arch=c000003e syscall=2 success=yes exit=18 a0=55c5fbf18f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=3277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636276.334:4238776): proctitle="dovecot/auth"
type=AVC msg=audit(1674636276.334:4238777): avc: denied { getattr } for pid=3277 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636276.334:4238777): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdfa91b460 a2=7ffdfa91b460 a3=fffffc00 items=0 ppid=5547 pid=3277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636276.334:4238777): proctitle="dovecot/auth"
type=AVC msg=audit(1674636282.346:4238778): avc: denied { name_connect } for pid=3277 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674636282.346:4238778): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdfa91b250 a2=10 a3=7ffdfa91b24c items=0 ppid=5547 pid=3277 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636282.346:4238778): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674636283.467:4238779): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674636283.467:4238779): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b1175a25010 items=0 ppid=3305 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636283.467:4238779): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E31352E3232322E3734002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365430
type=USER_ACCT msg=audit(1674636301.098:4238780): pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636301.098:4238781): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636301.098:4238782): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636301.098:4238783): pid=3372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636301.098:4238784): pid=3374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636301.098:4238785): pid=3373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636301.098:4238786): pid=3372 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257428 res=1
type=LOGIN msg=audit(1674636301.098:4238787): pid=3373 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257429 res=1
type=LOGIN msg=audit(1674636301.098:4238788): pid=3374 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257430 res=1
type=USER_START msg=audit(1674636301.148:4238789): pid=3372 uid=0 auid=0 ses=257428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636301.149:4238790): pid=3374 uid=0 auid=1055 ses=257430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636301.150:4238791): pid=3373 uid=0 auid=0 ses=257429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636301.150:4238792): pid=3374 uid=0 auid=1055 ses=257430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636301.151:4238793): pid=3372 uid=0 auid=0 ses=257428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636301.151:4238794): pid=3373 uid=0 auid=0 ses=257429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636301.285:4238795): pid=3373 uid=0 auid=0 ses=257429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636301.288:4238796): pid=3373 uid=0 auid=0 ses=257429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636301.546:4238797): pid=3374 uid=0 auid=1055 ses=257430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636301.569:4238798): pid=3374 uid=0 auid=1055 ses=257430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636304.628:4238799): pid=3372 uid=0 auid=0 ses=257428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636304.630:4238800): pid=3372 uid=0 auid=0 ses=257428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636304.850:4238801): avc: denied { write } for pid=3455 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674636304.850:4238801): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe2d288530 a2=6e a3=63d0ec10 items=0 ppid=5547 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636304.850:4238801): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674636322.094:4238802): avc: denied { write } for pid=3455 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674636322.094:4238802): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe2d288530 a2=6e a3=63d0ec22 items=0 ppid=5547 pid=3455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636322.094:4238802): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674636361.654:4238803): pid=3720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636361.654:4238804): pid=3720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636361.656:4238805): pid=3720 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257431 res=1
type=USER_START msg=audit(1674636361.681:4238806): pid=3720 uid=0 auid=1055 ses=257431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636361.685:4238807): pid=3720 uid=0 auid=1055 ses=257431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636362.192:4238808): pid=3720 uid=0 auid=1055 ses=257431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636362.202:4238809): pid=3720 uid=0 auid=1055 ses=257431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636421.222:4238810): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636421.222:4238811): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636421.222:4238812): pid=3937 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257432 res=1
type=USER_START msg=audit(1674636421.238:4238813): pid=3937 uid=0 auid=1055 ses=257432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636421.239:4238814): pid=3937 uid=0 auid=1055 ses=257432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636421.700:4238815): pid=3937 uid=0 auid=1055 ses=257432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636421.704:4238816): pid=3937 uid=0 auid=1055 ses=257432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636473.363:4238817): avc: denied { name_connect } for pid=3277 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674636473.363:4238817): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdfa91b250 a2=10 a3=7ffdfa91b24c items=0 ppid=5547 pid=3277 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636473.363:4238817): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674636481.723:4238818): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636481.723:4238819): pid=4170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636481.724:4238820): pid=4170 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257433 res=1
type=USER_START msg=audit(1674636481.741:4238821): pid=4170 uid=0 auid=1055 ses=257433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636481.743:4238822): pid=4170 uid=0 auid=1055 ses=257433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636482.131:4238823): pid=4170 uid=0 auid=1055 ses=257433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636482.138:4238824): pid=4170 uid=0 auid=1055 ses=257433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636498.516:4238825): avc: denied { read append } for pid=4238 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674636498.516:4238825): avc: denied { open } for pid=4238 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636498.516:4238825): arch=c000003e syscall=2 success=yes exit=8 a0=55dcf8854a60 a1=402 a2=7ffc4821e6f0 a3=7ffc4821e160 items=0 ppid=5547 pid=4238 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636498.516:4238825): proctitle="dovecot/imap"
type=AVC msg=audit(1674636498.516:4238826): avc: denied { getattr } for pid=4238 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636498.516:4238826): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc4821e650 a2=7ffc4821e650 a3=7ffc4821e0a0 items=0 ppid=5547 pid=4238 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636498.516:4238826): proctitle="dovecot/imap"
type=AVC msg=audit(1674636498.516:4238827): avc: denied { write } for pid=4238 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636498.516:4238827): arch=c000003e syscall=2 success=yes exit=10 a0=55dcf8859960 a1=2 a2=7ffc4821e3f0 a3=7ffc4821dea0 items=0 ppid=5547 pid=4238 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636498.516:4238827): proctitle="dovecot/imap"
type=AVC msg=audit(1674636498.516:4238828): avc: denied { lock } for pid=4238 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636498.516:4238828): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc4821e2f0 a3=63d0ecd2 items=0 ppid=5547 pid=4238 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636498.516:4238828): proctitle="dovecot/imap"
type=AVC msg=audit(1674636498.517:4238829): avc: denied { read } for pid=4238 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674636498.517:4238829): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55dcf88822f8 a2=90800 a3=0 items=0 ppid=5547 pid=4238 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636498.517:4238829): proctitle="dovecot/imap"
type=AVC msg=audit(1674636498.518:4238830): avc: denied { getattr } for pid=4238 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636498.518:4238830): arch=c000003e syscall=4 success=yes exit=0 a0=55dcf8844a60 a1=7ffc4821e6a0 a2=7ffc4821e6a0 a3=6f632e6f72676173 items=0 ppid=5547 pid=4238 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636498.518:4238830): proctitle="dovecot/imap"
type=AVC msg=audit(1674636501.615:4238831): avc: denied { write } for pid=4250 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674636501.615:4238831): arch=c000003e syscall=21 success=yes exit=0 a0=5636a28624c0 a1=2 a2=7b48 a3=7ffe50309560 items=0 ppid=5547 pid=4250 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636501.615:4238831): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674636541.155:4238832): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636541.156:4238833): pid=4410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636541.156:4238834): pid=4410 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257434 res=1
type=USER_START msg=audit(1674636541.174:4238835): pid=4410 uid=0 auid=1055 ses=257434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636541.175:4238836): pid=4410 uid=0 auid=1055 ses=257434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636541.665:4238837): pid=4410 uid=0 auid=1055 ses=257434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636541.668:4238838): pid=4410 uid=0 auid=1055 ses=257434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636601.679:4238839): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636601.679:4238840): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636601.679:4238841): pid=4639 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257435 res=1
type=USER_ACCT msg=audit(1674636601.679:4238842): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636601.679:4238843): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636601.693:4238844): pid=4638 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257436 res=1
type=USER_ACCT msg=audit(1674636601.697:4238845): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636601.697:4238846): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636601.698:4238847): pid=4640 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257437 res=1
type=USER_ACCT msg=audit(1674636601.698:4238848): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636601.698:4238849): pid=4637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636601.698:4238850): pid=4637 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257438 res=1
type=USER_START msg=audit(1674636601.789:4238851): pid=4640 uid=0 auid=1055 ses=257437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636601.791:4238852): pid=4639 uid=0 auid=0 ses=257435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636601.792:4238853): pid=4638 uid=0 auid=0 ses=257436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636601.794:4238854): pid=4639 uid=0 auid=0 ses=257435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636601.794:4238855): pid=4640 uid=0 auid=1055 ses=257437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636601.795:4238856): pid=4638 uid=0 auid=0 ses=257436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636601.803:4238857): pid=4637 uid=0 auid=0 ses=257438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636601.815:4238858): pid=4637 uid=0 auid=0 ses=257438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636601.902:4238859): pid=4637 uid=0 auid=0 ses=257438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636601.919:4238860): pid=4639 uid=0 auid=0 ses=257435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636601.921:4238861): pid=4637 uid=0 auid=0 ses=257438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636601.927:4238862): pid=4639 uid=0 auid=0 ses=257435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636602.188:4238863): pid=4640 uid=0 auid=1055 ses=257437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636602.188:4238864): pid=4640 uid=0 auid=1055 ses=257437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636605.214:4238865): pid=4638 uid=0 auid=0 ses=257436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636605.216:4238866): pid=4638 uid=0 auid=0 ses=257436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636606.257:4238867): avc: denied { name_connect } for pid=3277 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674636606.257:4238867): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffdfa91b250 a2=10 a3=7ffdfa91b24c items=0 ppid=5547 pid=3277 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636606.257:4238867): proctitle="dovecot/auth"
type=AVC msg=audit(1674636628.765:4238868): avc: denied { write } for pid=4865 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674636628.765:4238868): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff0eb1c610 a2=6e a3=63d0ed54 items=0 ppid=5547 pid=4865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636628.765:4238868): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674636661.242:4238869): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636661.242:4238870): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636661.244:4238871): pid=5016 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257439 res=1
type=USER_START msg=audit(1674636661.265:4238872): pid=5016 uid=0 auid=1055 ses=257439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636661.267:4238873): pid=5016 uid=0 auid=1055 ses=257439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636661.566:4238874): pid=5016 uid=0 auid=1055 ses=257439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636661.569:4238875): pid=5016 uid=0 auid=1055 ses=257439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636665.976:4238876): avc: denied { name_connect } for pid=3277 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674636665.976:4238876): arch=c000003e syscall=42 success=no exit=-115 a0=14 a1=7ffdfa91b250 a2=10 a3=7ffdfa91b24c items=0 ppid=5547 pid=3277 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636665.976:4238876): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674636721.601:4238877): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636721.601:4238878): pid=5243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636721.601:4238879): pid=5243 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257440 res=1
type=USER_START msg=audit(1674636721.646:4238880): pid=5243 uid=0 auid=1055 ses=257440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636721.648:4238881): pid=5243 uid=0 auid=1055 ses=257440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636722.083:4238882): pid=5243 uid=0 auid=1055 ses=257440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636722.094:4238883): pid=5243 uid=0 auid=1055 ses=257440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674636781.111:4238884): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636781.111:4238885): pid=5480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636781.112:4238886): pid=5480 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257441 res=1
type=USER_START msg=audit(1674636781.129:4238887): pid=5480 uid=0 auid=1055 ses=257441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636781.130:4238888): pid=5480 uid=0 auid=1055 ses=257441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636781.452:4238889): pid=5480 uid=0 auid=1055 ses=257441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636781.454:4238890): pid=5480 uid=0 auid=1055 ses=257441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636787.914:4238891): avc: denied { read } for pid=5514 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674636787.914:4238891): avc: denied { open } for pid=5514 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636787.914:4238891): arch=c000003e syscall=2 success=yes exit=18 a0=55bdf9781f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=5514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636787.914:4238891): proctitle="dovecot/auth"
type=AVC msg=audit(1674636787.914:4238892): avc: denied { getattr } for pid=5514 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674636787.914:4238892): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd136fa370 a2=7ffd136fa370 a3=fffffc00 items=0 ppid=5547 pid=5514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636787.914:4238892): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674636841.478:4238893): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636841.478:4238894): pid=5731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636841.479:4238895): pid=5731 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257442 res=1
type=USER_START msg=audit(1674636841.511:4238896): pid=5731 uid=0 auid=1055 ses=257442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636841.515:4238897): pid=5731 uid=0 auid=1055 ses=257442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636842.023:4238898): pid=5731 uid=0 auid=1055 ses=257442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636842.030:4238899): pid=5731 uid=0 auid=1055 ses=257442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674636899.427:4238900): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674636899.427:4238901): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674636899.427:4238902): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674636899.801:4238903): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=5951 suid=74 rport=50788 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674636899.802:4238904): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=5951 suid=74 rport=50788 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=USER_ACCT msg=audit(1674636901.047:4238905): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636901.048:4238906): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636901.048:4238907): pid=5959 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257443 res=1
type=USER_ACCT msg=audit(1674636901.061:4238908): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636901.062:4238909): pid=5960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636901.062:4238910): pid=5960 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257444 res=1
type=USER_START msg=audit(1674636901.088:4238911): pid=5959 uid=0 auid=0 ses=257443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674636901.089:4238912): pid=5960 uid=0 auid=1055 ses=257444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636901.090:4238913): pid=5960 uid=0 auid=1055 ses=257444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636901.090:4238914): pid=5959 uid=0 auid=0 ses=257443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636901.439:4238915): pid=5960 uid=0 auid=1055 ses=257444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636901.447:4238916): pid=5960 uid=0 auid=1055 ses=257444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674636901.529:4238917): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674636903.437:4238918): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674636904.402:4238919): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5951 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674636904.403:4238920): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5951 suid=74 rport=50788 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674636904.409:4238921): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674636904.409:4238922): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674636904.409:4238923): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674636904.410:4238924): pid=5950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674636904.571:4238925): pid=5959 uid=0 auid=0 ses=257443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636904.577:4238926): pid=5959 uid=0 auid=0 ses=257443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674636909.706:4238927): avc: denied { name_connect } for pid=5804 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674636909.706:4238927): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7fffa0c2fd00 a2=10 a3=7fffa0c2fcfc items=0 ppid=5547 pid=5804 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636909.706:4238927): proctitle="dovecot/auth"
type=AVC msg=audit(1674636909.723:4238928): avc: denied { write } for pid=5810 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674636909.723:4238928): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc31c4e360 a2=6e a3=63d0ee6d items=0 ppid=5547 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636909.723:4238928): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674636912.061:4238929): avc: denied { write } for pid=5810 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674636912.061:4238929): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc31c4e360 a2=6e a3=63d0ee70 items=0 ppid=5547 pid=5810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636912.061:4238929): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674636941.902:4238930): avc: denied { name_connect } for pid=5804 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674636941.902:4238930): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7fffa0c2fd00 a2=10 a3=7fffa0c2fcfc items=0 ppid=5547 pid=5804 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636941.902:4238930): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674636943.014:4238931): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674636943.014:4238931): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b60a74a8010 items=0 ppid=6248 pid=6253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674636943.014:4238931): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E322E3130312E323130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365430
type=USER_ACCT msg=audit(1674636961.604:4238932): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674636961.605:4238933): pid=6318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674636961.606:4238934): pid=6318 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257445 res=1
type=USER_START msg=audit(1674636961.628:4238935): pid=6318 uid=0 auid=1055 ses=257445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674636961.631:4238936): pid=6318 uid=0 auid=1055 ses=257445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674636961.989:4238937): pid=6318 uid=0 auid=1055 ses=257445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674636961.991:4238938): pid=6318 uid=0 auid=1055 ses=257445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637022.040:4238939): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637022.040:4238940): pid=6548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637022.042:4238941): pid=6548 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257446 res=1
type=USER_START msg=audit(1674637022.087:4238942): pid=6548 uid=0 auid=1055 ses=257446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637022.088:4238943): pid=6548 uid=0 auid=1055 ses=257446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637022.521:4238944): pid=6548 uid=0 auid=1055 ses=257446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637022.524:4238945): pid=6548 uid=0 auid=1055 ses=257446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674637030.781:4238946): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674637030.781:4238946): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b53f9f4f010 items=0 ppid=6586 pid=6591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637030.781:4238946): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138302E3136372E3131312E3338002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674637081.547:4238947): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637081.547:4238948): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637081.548:4238949): pid=6787 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257447 res=1
type=USER_ACCT msg=audit(1674637081.552:4238950): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637081.552:4238951): pid=6788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637081.552:4238952): pid=6788 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257448 res=1
type=USER_START msg=audit(1674637081.616:4238953): pid=6787 uid=0 auid=0 ses=257447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637081.618:4238954): pid=6787 uid=0 auid=0 ses=257447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637081.624:4238955): pid=6788 uid=0 auid=1055 ses=257448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637081.625:4238956): pid=6788 uid=0 auid=1055 ses=257448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637081.683:4238957): pid=6787 uid=0 auid=0 ses=257447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637081.689:4238958): pid=6787 uid=0 auid=0 ses=257447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637082.046:4238959): pid=6788 uid=0 auid=1055 ses=257448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637082.047:4238960): pid=6788 uid=0 auid=1055 ses=257448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674637103.856:4238961): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637103.856:4238962): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637103.856:4238963): pid=6872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674637141.066:4238964): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637141.066:4238965): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637141.067:4238966): pid=7030 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257449 res=1
type=USER_START msg=audit(1674637141.079:4238967): pid=7030 uid=0 auid=1055 ses=257449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637141.081:4238968): pid=7030 uid=0 auid=1055 ses=257449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637141.425:4238969): pid=7030 uid=0 auid=1055 ses=257449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637141.427:4238970): pid=7030 uid=0 auid=1055 ses=257449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674637200.146:4238971): avc: denied { read } for pid=7267 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674637200.146:4238971): avc: denied { open } for pid=7267 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637200.146:4238971): arch=c000003e syscall=2 success=yes exit=18 a0=5562b5590f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=7267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637200.146:4238971): proctitle="dovecot/auth"
type=AVC msg=audit(1674637200.146:4238972): avc: denied { getattr } for pid=7267 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637200.146:4238972): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdf19a4cc0 a2=7ffdf19a4cc0 a3=fffffc00 items=0 ppid=5547 pid=7267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637200.146:4238972): proctitle="dovecot/auth"
type=AVC msg=audit(1674637200.724:4238973): avc: denied { name_connect } for pid=7267 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674637200.724:4238973): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdf19a4ab0 a2=10 a3=7ffdf19a4aac items=0 ppid=5547 pid=7267 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637200.724:4238973): proctitle="dovecot/auth"
type=AVC msg=audit(1674637200.753:4238974): avc: denied { write } for pid=7272 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674637200.753:4238974): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff2fabe8d0 a2=6e a3=63d0ef90 items=0 ppid=5547 pid=7272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637200.753:4238974): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674637201.094:4238975): avc: denied { read append } for pid=7274 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674637201.094:4238975): avc: denied { open } for pid=7274 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637201.094:4238975): arch=c000003e syscall=2 success=yes exit=8 a0=559b174a0a60 a1=402 a2=7fffa6b8c350 a3=7fffa6b8bde0 items=0 ppid=5547 pid=7274 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637201.094:4238975): proctitle="dovecot/imap"
type=AVC msg=audit(1674637201.094:4238976): avc: denied { getattr } for pid=7274 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637201.094:4238976): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fffa6b8c2b0 a2=7fffa6b8c2b0 a3=7fffa6b8bd20 items=0 ppid=5547 pid=7274 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637201.094:4238976): proctitle="dovecot/imap"
type=AVC msg=audit(1674637201.094:4238977): avc: denied { write } for pid=7274 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637201.094:4238977): arch=c000003e syscall=2 success=yes exit=10 a0=559b174a5960 a1=2 a2=7fffa6b8c050 a3=7fffa6b8bae0 items=0 ppid=5547 pid=7274 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637201.094:4238977): proctitle="dovecot/imap"
type=AVC msg=audit(1674637201.095:4238978): avc: denied { lock } for pid=7274 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637201.095:4238978): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffa6b8bf50 a3=63d0ef91 items=0 ppid=5547 pid=7274 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637201.095:4238978): proctitle="dovecot/imap"
type=AVC msg=audit(1674637201.095:4238979): avc: denied { read } for pid=7274 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674637201.095:4238979): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=559b174ce2f8 a2=90800 a3=0 items=0 ppid=5547 pid=7274 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637201.095:4238979): proctitle="dovecot/imap"
type=AVC msg=audit(1674637201.095:4238980): avc: denied { getattr } for pid=7274 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637201.095:4238980): arch=c000003e syscall=4 success=yes exit=0 a0=559b17490a60 a1=7fffa6b8c300 a2=7fffa6b8c300 a3=6f632e6f72676173 items=0 ppid=5547 pid=7274 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637201.095:4238980): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674637201.456:4238981): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637201.456:4238982): pid=7278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637201.456:4238983): pid=7278 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=209 tty=(none) old-ses=4294967295 ses=257450 res=1
type=USER_ACCT msg=audit(1674637201.464:4238984): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637201.464:4238985): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637201.464:4238986): pid=7277 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257451 res=1
type=USER_ACCT msg=audit(1674637201.466:4238987): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637201.466:4238988): pid=7280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637201.468:4238989): pid=7280 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257452 res=1
type=USER_ACCT msg=audit(1674637201.468:4238990): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637201.469:4238991): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637201.469:4238992): pid=7279 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257453 res=1
type=USER_START msg=audit(1674637201.695:4238993): pid=7277 uid=0 auid=0 ses=257451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637201.696:4238994): pid=7280 uid=0 auid=1055 ses=257452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637201.697:4238995): pid=7278 uid=0 auid=209 ses=257450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637201.699:4238996): pid=7279 uid=0 auid=0 ses=257453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637201.713:4238997): pid=7277 uid=0 auid=0 ses=257451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637201.714:4238998): pid=7279 uid=0 auid=0 ses=257453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637201.720:4238999): pid=7278 uid=0 auid=209 ses=257450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637201.721:4239000): pid=7280 uid=0 auid=1055 ses=257452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637201.905:4239001): pid=7277 uid=0 auid=0 ses=257451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637201.932:4239002): pid=7277 uid=0 auid=0 ses=257451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637202.040:4239003): pid=7278 uid=0 auid=209 ses=257450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637202.040:4239004): pid=7278 uid=0 auid=209 ses=257450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637202.489:4239005): pid=7280 uid=0 auid=1055 ses=257452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637202.501:4239006): pid=7280 uid=0 auid=1055 ses=257452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674637202.546:4239007): avc: denied { read } for pid=7308 comm="imap" name="dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674637202.546:4239007): avc: denied { open } for pid=7308 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637202.546:4239007): arch=c000003e syscall=2 success=yes exit=8 a0=556ede4be4b0 a1=0 a2=7b48 a3=ffffff00 items=0 ppid=5547 pid=7308 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637202.546:4239007): proctitle="dovecot/imap"
type=AVC msg=audit(1674637202.546:4239008): avc: denied { getattr } for pid=7308 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637202.546:4239008): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe7d3380b0 a2=7ffe7d3380b0 a3=ffffff00 items=0 ppid=5547 pid=7308 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637202.546:4239008): proctitle="dovecot/imap"
type=AVC msg=audit(1674637202.546:4239009): avc: denied { append } for pid=7308 comm="imap" name="dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637202.546:4239009): arch=c000003e syscall=2 success=yes exit=8 a0=556ede5120d0 a1=402 a2=7ffe7d338010 a3=7ffe7d337aa0 items=0 ppid=5547 pid=7308 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637202.546:4239009): proctitle="dovecot/imap"
type=AVC msg=audit(1674637202.548:4239010): avc: denied { write } for pid=7308 comm="imap" name="dovecot.index" dev="vda1" ino=33481563 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637202.548:4239010): arch=c000003e syscall=2 success=yes exit=10 a0=556ede511e10 a1=2 a2=7ffe7d337d10 a3=7ffe7d3377a0 items=0 ppid=5547 pid=7308 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637202.548:4239010): proctitle="dovecot/imap"
type=AVC msg=audit(1674637202.548:4239011): avc: denied { write } for pid=7308 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674637202.548:4239011): arch=c000003e syscall=21 success=yes exit=0 a0=556ede4be4c0 a1=2 a2=7b48 a3=7ffe7d337ba0 items=0 ppid=5547 pid=7308 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637202.548:4239011): proctitle="dovecot/imap"
type=AVC msg=audit(1674637204.278:4239012): avc: denied { lock } for pid=7315 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637204.278:4239012): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe69d614f0 a3=63d0ef94 items=0 ppid=5547 pid=7315 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637204.278:4239012): proctitle="dovecot/imap"
type=AVC msg=audit(1674637204.278:4239013): avc: denied { read } for pid=7315 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674637204.278:4239013): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=556ea7fe72f8 a2=90800 a3=0 items=0 ppid=5547 pid=7315 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637204.278:4239013): proctitle="dovecot/imap"
type=CRED_DISP msg=audit(1674637205.367:4239014): pid=7279 uid=0 auid=0 ses=257453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637205.371:4239015): pid=7279 uid=0 auid=0 ses=257453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674637212.545:4239016): avc: denied { write } for pid=7272 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674637212.545:4239016): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff2fabe8d0 a2=6e a3=63d0ef9c items=0 ppid=5547 pid=7272 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637212.545:4239016): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674637251.585:4239017): avc: denied { name_connect } for pid=7267 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674637251.585:4239017): arch=c000003e syscall=42 success=no exit=-115 a0=19 a1=7ffdf19a4ab0 a2=10 a3=7ffdf19a4aac items=0 ppid=5547 pid=7267 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637251.585:4239017): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674637261.397:4239019): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637261.397:4239018): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637261.397:4239020): pid=7641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637261.397:4239021): pid=7642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637261.398:4239022): pid=7641 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257454 res=1
type=LOGIN msg=audit(1674637261.398:4239023): pid=7642 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257455 res=1
type=USER_START msg=audit(1674637261.437:4239024): pid=7642 uid=0 auid=1055 ses=257455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637261.438:4239025): pid=7641 uid=0 auid=0 ses=257454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637261.439:4239026): pid=7641 uid=0 auid=0 ses=257454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637261.439:4239027): pid=7642 uid=0 auid=1055 ses=257455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637261.476:4239028): pid=7641 uid=0 auid=0 ses=257454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637261.479:4239029): pid=7641 uid=0 auid=0 ses=257454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637261.828:4239030): pid=7642 uid=0 auid=1055 ses=257455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637261.829:4239031): pid=7642 uid=0 auid=1055 ses=257455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637321.867:4239032): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637321.867:4239033): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637321.867:4239034): pid=7879 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257456 res=1
type=USER_START msg=audit(1674637321.894:4239035): pid=7879 uid=0 auid=1055 ses=257456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637321.898:4239036): pid=7879 uid=0 auid=1055 ses=257456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637322.305:4239037): pid=7879 uid=0 auid=1055 ses=257456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637322.307:4239038): pid=7879 uid=0 auid=1055 ses=257456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637381.337:4239039): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637381.337:4239040): pid=8097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637381.337:4239041): pid=8097 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257457 res=1
type=USER_START msg=audit(1674637381.362:4239042): pid=8097 uid=0 auid=1055 ses=257457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637381.364:4239043): pid=8097 uid=0 auid=1055 ses=257457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637381.686:4239044): pid=8097 uid=0 auid=1055 ses=257457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637381.688:4239045): pid=8097 uid=0 auid=1055 ses=257457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637441.700:4239046): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637441.700:4239047): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637441.702:4239048): pid=8321 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257458 res=1
type=USER_START msg=audit(1674637441.715:4239049): pid=8321 uid=0 auid=1055 ses=257458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637441.717:4239050): pid=8321 uid=0 auid=1055 ses=257458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637442.061:4239051): pid=8321 uid=0 auid=1055 ses=257458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637442.063:4239052): pid=8321 uid=0 auid=1055 ses=257458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674637448.657:4239053): avc: denied { read } for pid=8356 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674637448.657:4239053): avc: denied { open } for pid=8356 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637448.657:4239053): arch=c000003e syscall=2 success=yes exit=18 a0=55b59c7d9f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=8356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637448.657:4239053): proctitle="dovecot/auth"
type=AVC msg=audit(1674637448.657:4239054): avc: denied { getattr } for pid=8356 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637448.657:4239054): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffccc1fdab0 a2=7ffccc1fdab0 a3=fffffc00 items=0 ppid=5547 pid=8356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637448.657:4239054): proctitle="dovecot/auth"
type=AVC msg=audit(1674637450.496:4239055): avc: denied { name_connect } for pid=8356 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674637450.496:4239055): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffccc1fd8a0 a2=10 a3=7ffccc1fd89c items=0 ppid=5547 pid=8356 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637450.496:4239055): proctitle="dovecot/auth"
type=AVC msg=audit(1674637450.532:4239056): avc: denied { write } for pid=8362 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674637450.532:4239056): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd7c7e4eb0 a2=6e a3=63d0f08a items=0 ppid=5547 pid=8362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637450.532:4239056): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674637501.082:4239057): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637501.082:4239058): pid=8573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637501.082:4239059): pid=8573 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257459 res=1
type=USER_ACCT msg=audit(1674637501.085:4239060): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637501.085:4239061): pid=8574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637501.085:4239062): pid=8574 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257460 res=1
type=USER_ACCT msg=audit(1674637501.086:4239063): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637501.086:4239064): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637501.086:4239065): pid=8575 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257461 res=1
type=USER_START msg=audit(1674637501.134:4239066): pid=8575 uid=0 auid=1055 ses=257461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637501.134:4239067): pid=8573 uid=0 auid=0 ses=257459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637501.135:4239068): pid=8574 uid=0 auid=0 ses=257460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637501.136:4239069): pid=8575 uid=0 auid=1055 ses=257461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637501.136:4239070): pid=8574 uid=0 auid=0 ses=257460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637501.137:4239071): pid=8573 uid=0 auid=0 ses=257459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637501.256:4239072): pid=8574 uid=0 auid=0 ses=257460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637501.259:4239073): pid=8574 uid=0 auid=0 ses=257460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637501.537:4239074): pid=8575 uid=0 auid=1055 ses=257461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637501.545:4239075): pid=8575 uid=0 auid=1055 ses=257461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637504.649:4239076): pid=8573 uid=0 auid=0 ses=257459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637504.651:4239077): pid=8573 uid=0 auid=0 ses=257459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674637531.844:4239078): avc: denied { name_connect } for pid=8356 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674637531.844:4239078): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffccc1fd8a0 a2=10 a3=7ffccc1fd89c items=0 ppid=5547 pid=8356 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637531.844:4239078): proctitle="dovecot/auth"
type=AVC msg=audit(1674637531.856:4239079): avc: denied { write } for pid=8362 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674637531.856:4239079): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd7c7e4eb0 a2=6e a3=63d0f0db items=0 ppid=5547 pid=8362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637531.856:4239079): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674637561.700:4239080): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637561.700:4239081): pid=9029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637561.702:4239082): pid=9029 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257462 res=1
type=USER_START msg=audit(1674637561.727:4239083): pid=9029 uid=0 auid=1055 ses=257462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637561.740:4239084): pid=9029 uid=0 auid=1055 ses=257462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637562.127:4239085): pid=9029 uid=0 auid=1055 ses=257462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637562.133:4239086): pid=9029 uid=0 auid=1055 ses=257462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637621.151:4239087): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637621.151:4239088): pid=9341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637621.151:4239089): pid=9341 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257463 res=1
type=USER_START msg=audit(1674637621.168:4239090): pid=9341 uid=0 auid=1055 ses=257463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637621.169:4239091): pid=9341 uid=0 auid=1055 ses=257463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637621.524:4239092): pid=9341 uid=0 auid=1055 ses=257463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637621.526:4239093): pid=9341 uid=0 auid=1055 ses=257463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674637643.943:4239094): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637643.943:4239095): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637643.943:4239096): pid=9452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674637644.149:4239097): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=9452 suid=74 rport=57446 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674637644.149:4239098): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=9452 suid=74 rport=57446 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=USER_AUTH msg=audit(1674637645.298:4239099): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=81.161.229.135 addr=81.161.229.135 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674637647.009:4239100): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674637647.199:4239101): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9452 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637647.199:4239102): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9452 suid=74 rport=57446 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637647.201:4239103): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637647.201:4239104): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637647.201:4239105): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9451 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674637647.201:4239106): pid=9451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674637681.544:4239107): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637681.544:4239108): pid=9654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637681.545:4239109): pid=9654 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257464 res=1
type=USER_START msg=audit(1674637681.561:4239110): pid=9654 uid=0 auid=1055 ses=257464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637681.562:4239111): pid=9654 uid=0 auid=1055 ses=257464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637682.025:4239112): pid=9654 uid=0 auid=1055 ses=257464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637682.036:4239113): pid=9654 uid=0 auid=1055 ses=257464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674637702.801:4239114): avc: denied { read } for pid=9757 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674637702.801:4239114): avc: denied { open } for pid=9757 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637702.801:4239114): arch=c000003e syscall=2 success=yes exit=18 a0=55ad59e82f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=9757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637702.801:4239114): proctitle="dovecot/auth"
type=AVC msg=audit(1674637702.802:4239115): avc: denied { getattr } for pid=9757 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637702.802:4239115): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff502e6740 a2=7fff502e6740 a3=fffffc00 items=0 ppid=5547 pid=9757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637702.802:4239115): proctitle="dovecot/auth"
type=AVC msg=audit(1674637705.090:4239116): avc: denied { name_connect } for pid=9757 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674637705.090:4239116): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff502e6530 a2=10 a3=7fff502e652c items=0 ppid=5547 pid=9757 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637705.090:4239116): proctitle="dovecot/auth"
type=AVC msg=audit(1674637705.120:4239117): avc: denied { write } for pid=9772 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674637705.120:4239117): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd99a5ac80 a2=6e a3=63d0f189 items=0 ppid=5547 pid=9772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637705.120:4239117): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674637725.187:4239118): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674637725.187:4239118): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad4c89bf010 items=0 ppid=9890 pid=9895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637725.187:4239118): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3138392E3136332E3832002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674637736.970:4239119): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637736.970:4239120): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637736.970:4239121): pid=9948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674637737.154:4239122): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=9948 suid=74 rport=35538 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674637737.154:4239123): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=9948 suid=74 rport=35538 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674637738.188:4239124): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674637740.336:4239125): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674637741.057:4239126): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637741.057:4239127): pid=9968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637741.057:4239128): pid=9969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637741.058:4239129): pid=9968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637741.059:4239130): pid=9969 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257465 res=1
type=LOGIN msg=audit(1674637741.059:4239131): pid=9968 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257466 res=1
type=USER_START msg=audit(1674637741.099:4239132): pid=9969 uid=0 auid=1055 ses=257465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637741.100:4239133): pid=9968 uid=0 auid=0 ses=257466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637741.101:4239134): pid=9969 uid=0 auid=1055 ses=257465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637741.102:4239135): pid=9968 uid=0 auid=0 ses=257466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637741.543:4239136): pid=9969 uid=0 auid=1055 ses=257465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637741.550:4239137): pid=9969 uid=0 auid=1055 ses=257465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637743.120:4239138): pid=9968 uid=0 auid=0 ses=257466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637743.123:4239139): pid=9968 uid=0 auid=0 ses=257466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674637743.533:4239140): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674637745.366:4239141): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674637748.557:4239142): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674637750.745:4239143): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674637753.933:4239144): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9948 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637753.933:4239145): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9948 suid=74 rport=35538 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637753.935:4239146): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637753.936:4239147): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637753.936:4239148): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674637753.936:4239149): pid=9947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=AVC msg=audit(1674637796.126:4239150): avc: denied { read } for pid=10318 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674637796.126:4239150): avc: denied { open } for pid=10318 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637796.126:4239150): arch=c000003e syscall=2 success=yes exit=18 a0=556a11d69f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=10318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637796.126:4239150): proctitle="dovecot/auth"
type=AVC msg=audit(1674637796.126:4239151): avc: denied { getattr } for pid=10318 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674637796.126:4239151): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc44e8a8c0 a2=7ffc44e8a8c0 a3=fffffc00 items=0 ppid=5547 pid=10318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637796.126:4239151): proctitle="dovecot/auth"
type=AVC msg=audit(1674637796.768:4239152): avc: denied { name_connect } for pid=10318 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674637796.768:4239152): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc44e8a6b0 a2=10 a3=7ffc44e8a6ac items=0 ppid=5547 pid=10318 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637796.768:4239152): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674637797.902:4239153): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674637797.902:4239153): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b94b7f69010 items=0 ppid=10325 pid=10333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637797.902:4239153): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3235352E3138312E313937002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674637801.150:4239155): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637801.150:4239154): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637801.150:4239156): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637801.151:4239157): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637801.151:4239158): pid=10348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637801.151:4239159): pid=10347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637801.151:4239160): pid=10349 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257467 res=1
type=LOGIN msg=audit(1674637801.151:4239161): pid=10348 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257468 res=1
type=LOGIN msg=audit(1674637801.151:4239162): pid=10347 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257469 res=1
type=USER_START msg=audit(1674637801.207:4239163): pid=10348 uid=0 auid=0 ses=257468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637801.209:4239164): pid=10347 uid=0 auid=0 ses=257469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637801.210:4239165): pid=10348 uid=0 auid=0 ses=257468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637801.211:4239166): pid=10349 uid=0 auid=1055 ses=257467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637801.212:4239167): pid=10347 uid=0 auid=0 ses=257469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637801.214:4239168): pid=10349 uid=0 auid=1055 ses=257467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637801.246:4239169): pid=10347 uid=0 auid=0 ses=257469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637801.249:4239170): pid=10347 uid=0 auid=0 ses=257469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637801.604:4239171): pid=10349 uid=0 auid=1055 ses=257467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637801.617:4239172): pid=10349 uid=0 auid=1055 ses=257467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637804.594:4239173): pid=10348 uid=0 auid=0 ses=257468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637804.601:4239174): pid=10348 uid=0 auid=0 ses=257468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674637851.227:4239175): avc: denied { name_connect } for pid=10318 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674637851.227:4239175): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc44e8a6b0 a2=10 a3=7ffc44e8a6ac items=0 ppid=5547 pid=10318 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637851.227:4239175): proctitle="dovecot/auth"
type=AVC msg=audit(1674637851.272:4239176): avc: denied { write } for pid=10679 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674637851.272:4239176): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe6ab9e6d0 a2=6e a3=63d0f21b items=0 ppid=5547 pid=10679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674637851.272:4239176): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674637861.624:4239177): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637861.625:4239178): pid=10783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637861.627:4239179): pid=10783 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257470 res=1
type=USER_START msg=audit(1674637861.655:4239180): pid=10783 uid=0 auid=1055 ses=257470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637861.658:4239181): pid=10783 uid=0 auid=1055 ses=257470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637862.071:4239182): pid=10783 uid=0 auid=1055 ses=257470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637862.084:4239183): pid=10783 uid=0 auid=1055 ses=257470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674637921.100:4239184): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637921.100:4239185): pid=11107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637921.100:4239186): pid=11107 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257471 res=1
type=USER_START msg=audit(1674637921.114:4239187): pid=11107 uid=0 auid=1055 ses=257471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637921.116:4239188): pid=11107 uid=0 auid=1055 ses=257471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637921.436:4239189): pid=11107 uid=0 auid=1055 ses=257471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637921.439:4239190): pid=11107 uid=0 auid=1055 ses=257471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674637952.967:4239191): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637952.967:4239192): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637952.968:4239193): pid=11318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674637953.196:4239194): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=11318 suid=74 rport=36320 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=122.116.138.31 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674637953.197:4239195): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=11318 suid=74 rport=36320 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=122.116.138.31 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637954.337:4239196): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11318 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637954.337:4239197): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11318 suid=74 rport=36320 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=122.116.138.31 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637954.338:4239198): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637954.338:4239199): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674637954.338:4239200): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674637954.338:4239201): pid=11316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=122.116.138.31 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674637981.458:4239202): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637981.458:4239203): pid=11466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637981.459:4239204): pid=11466 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257472 res=1
type=USER_ACCT msg=audit(1674637981.462:4239205): pid=11467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674637981.462:4239206): pid=11467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674637981.462:4239207): pid=11467 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257473 res=1
type=USER_START msg=audit(1674637981.494:4239208): pid=11467 uid=0 auid=1055 ses=257473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674637981.495:4239209): pid=11466 uid=0 auid=0 ses=257472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637981.497:4239210): pid=11467 uid=0 auid=1055 ses=257473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674637981.500:4239211): pid=11466 uid=0 auid=0 ses=257472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637981.572:4239212): pid=11466 uid=0 auid=0 ses=257472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637981.579:4239213): pid=11466 uid=0 auid=0 ses=257472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674637981.878:4239214): pid=11467 uid=0 auid=1055 ses=257473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674637981.884:4239215): pid=11467 uid=0 auid=1055 ses=257473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674638041.901:4239216): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638041.901:4239217): pid=11835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638041.902:4239218): pid=11835 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257474 res=1
type=USER_START msg=audit(1674638041.915:4239219): pid=11835 uid=0 auid=1055 ses=257474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638041.916:4239220): pid=11835 uid=0 auid=1055 ses=257474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638042.264:4239221): pid=11835 uid=0 auid=1055 ses=257474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638042.267:4239222): pid=11835 uid=0 auid=1055 ses=257474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674638069.898:4239223): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638069.898:4239224): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638069.898:4239225): pid=12028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12028 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674638070.127:4239226): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=12028 suid=74 rport=62485 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=221.157.140.133 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674638070.128:4239227): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=12028 suid=74 rport=62485 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=221.157.140.133 terminal=? res=success'
type=USER_AUTH msg=audit(1674638072.226:4239228): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=221.157.140.133 addr=221.157.140.133 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638074.224:4239229): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.157.140.133 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638074.807:4239230): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.157.140.133 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638075.339:4239231): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=221.157.140.133 addr=221.157.140.133 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638077.082:4239232): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.157.140.133 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638078.659:4239233): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=221.157.140.133 addr=221.157.140.133 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638080.817:4239234): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.157.140.133 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674638081.461:4239235): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674638081.461:4239235): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f63053b4010 items=0 ppid=12102 pid=12105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638081.461:4239235): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674638081.468:4239236): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674638081.468:4239236): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f934c73d010 items=0 ppid=12102 pid=12106 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638081.468:4239236): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674638081.474:4239237): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674638081.474:4239237): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd87aedc010 items=0 ppid=12102 pid=12107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638081.474:4239237): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674638081.480:4239238): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674638081.480:4239238): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f331fb0a010 items=0 ppid=12102 pid=12108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638081.480:4239238): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=USER_AUTH msg=audit(1674638081.538:4239239): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=221.157.140.133 addr=221.157.140.133 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674638081.964:4239240): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674638081.964:4239240): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbd954d6010 items=0 ppid=12102 pid=12118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638081.964:4239240): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232312E3135372E37352E323532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638081.971:4239241): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674638081.971:4239241): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f217e2bf010 items=0 ppid=12102 pid=12119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638081.971:4239241): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232312E3135372E37352E323532002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674638081.979:4239242): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674638081.979:4239242): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7face4d3c010 items=0 ppid=12102 pid=12120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638081.979:4239242): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003232312E3135372E3134302E313333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638081.986:4239243): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674638081.986:4239243): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0ab09c5010 items=0 ppid=12102 pid=12121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638081.986:4239243): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003232312E3135372E3134302E313333002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674638083.440:4239244): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.157.140.133 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674638101.295:4239245): pid=12262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674638101.295:4239246): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638101.295:4239247): pid=12262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638101.296:4239248): pid=12263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638101.297:4239249): pid=12263 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257475 res=1
type=LOGIN msg=audit(1674638101.297:4239250): pid=12262 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257476 res=1
type=USER_START msg=audit(1674638101.335:4239251): pid=12263 uid=0 auid=1055 ses=257475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674638101.335:4239252): pid=12262 uid=0 auid=0 ses=257476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638101.336:4239253): pid=12263 uid=0 auid=1055 ses=257475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638101.337:4239254): pid=12262 uid=0 auid=0 ses=257476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638101.689:4239255): pid=12263 uid=0 auid=1055 ses=257475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638101.694:4239256): pid=12263 uid=0 auid=1055 ses=257475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638104.690:4239257): pid=12262 uid=0 auid=0 ses=257476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638104.693:4239258): pid=12262 uid=0 auid=0 ses=257476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674638116.093:4239259): avc: denied { read } for pid=12359 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674638116.093:4239259): avc: denied { open } for pid=12359 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638116.093:4239259): arch=c000003e syscall=2 success=yes exit=18 a0=564df987ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=12359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638116.093:4239259): proctitle="dovecot/auth"
type=AVC msg=audit(1674638116.094:4239260): avc: denied { getattr } for pid=12359 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638116.094:4239260): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe4bd76690 a2=7ffe4bd76690 a3=fffffc00 items=0 ppid=5547 pid=12359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638116.094:4239260): proctitle="dovecot/auth"
type=AVC msg=audit(1674638117.740:4239261): avc: denied { name_connect } for pid=12359 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674638117.740:4239261): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe4bd76480 a2=10 a3=7ffe4bd7647c items=0 ppid=5547 pid=12359 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638117.740:4239261): proctitle="dovecot/auth"
type=AVC msg=audit(1674638117.774:4239262): avc: denied { write } for pid=12368 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674638117.774:4239262): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd273d5b60 a2=6e a3=63d0f325 items=0 ppid=5547 pid=12368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638117.774:4239262): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674638161.720:4239263): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638161.720:4239264): pid=12685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638161.736:4239265): pid=12685 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257477 res=1
type=USER_START msg=audit(1674638161.764:4239266): pid=12685 uid=0 auid=1055 ses=257477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638161.769:4239267): pid=12685 uid=0 auid=1055 ses=257477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638162.217:4239268): pid=12685 uid=0 auid=1055 ses=257477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638162.221:4239269): pid=12685 uid=0 auid=1055 ses=257477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674638164.237:4239270): avc: denied { write } for pid=12368 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674638164.237:4239270): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd273d5b60 a2=6e a3=63d0f354 items=0 ppid=5547 pid=12368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638164.237:4239270): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674638221.243:4239271): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638221.244:4239272): pid=13089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638221.244:4239273): pid=13089 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257478 res=1
type=USER_START msg=audit(1674638221.270:4239274): pid=13089 uid=0 auid=1055 ses=257478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638221.271:4239275): pid=13089 uid=0 auid=1055 ses=257478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638221.698:4239276): pid=13089 uid=0 auid=1055 ses=257478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638221.698:4239277): pid=13089 uid=0 auid=1055 ses=257478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674638281.725:4239278): pid=13447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638281.725:4239279): pid=13447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638281.725:4239280): pid=13447 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257479 res=1
type=USER_START msg=audit(1674638281.743:4239281): pid=13447 uid=0 auid=1055 ses=257479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638281.746:4239282): pid=13447 uid=0 auid=1055 ses=257479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638282.094:4239283): pid=13447 uid=0 auid=1055 ses=257479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638282.096:4239284): pid=13447 uid=0 auid=1055 ses=257479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674638341.120:4239285): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638341.120:4239286): pid=13784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638341.120:4239287): pid=13784 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257480 res=1
type=USER_START msg=audit(1674638341.135:4239288): pid=13784 uid=0 auid=1055 ses=257480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638341.136:4239289): pid=13784 uid=0 auid=1055 ses=257480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638341.495:4239290): pid=13784 uid=0 auid=1055 ses=257480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638341.497:4239291): pid=13784 uid=0 auid=1055 ses=257480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674638396.013:4239292): avc: denied { read } for pid=14099 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674638396.013:4239292): avc: denied { open } for pid=14099 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638396.013:4239292): arch=c000003e syscall=2 success=yes exit=18 a0=562f781fcf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=14099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638396.013:4239292): proctitle="dovecot/auth"
type=AVC msg=audit(1674638396.013:4239293): avc: denied { getattr } for pid=14099 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638396.013:4239293): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdb40b7520 a2=7ffdb40b7520 a3=fffffc00 items=0 ppid=5547 pid=14099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638396.013:4239293): proctitle="dovecot/auth"
type=AVC msg=audit(1674638399.852:4239294): avc: denied { name_connect } for pid=14099 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674638399.852:4239294): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdb40b7310 a2=10 a3=7ffdb40b730c items=0 ppid=5547 pid=14099 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638399.852:4239294): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674638401.518:4239295): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638401.518:4239296): pid=14138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638401.519:4239297): pid=14138 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257481 res=1
type=USER_ACCT msg=audit(1674638401.522:4239298): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674638401.522:4239299): pid=14140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638401.522:4239300): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638401.522:4239301): pid=14140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638401.522:4239302): pid=14139 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257482 res=1
type=LOGIN msg=audit(1674638401.522:4239303): pid=14140 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257483 res=1
type=USER_ACCT msg=audit(1674638401.525:4239304): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638401.525:4239305): pid=14137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638401.525:4239306): pid=14137 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257484 res=1
type=USER_START msg=audit(1674638401.575:4239307): pid=14140 uid=0 auid=1055 ses=257483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674638401.575:4239308): pid=14138 uid=0 auid=0 ses=257481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674638401.575:4239309): pid=14139 uid=0 auid=0 ses=257482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674638401.576:4239310): pid=14137 uid=0 auid=0 ses=257484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638401.577:4239311): pid=14138 uid=0 auid=0 ses=257481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638401.577:4239312): pid=14139 uid=0 auid=0 ses=257482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638401.577:4239313): pid=14137 uid=0 auid=0 ses=257484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638401.578:4239314): pid=14140 uid=0 auid=1055 ses=257483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638401.688:4239315): pid=14137 uid=0 auid=0 ses=257484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638401.697:4239316): pid=14139 uid=0 auid=0 ses=257482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638401.712:4239317): pid=14139 uid=0 auid=0 ses=257482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638401.724:4239318): pid=14137 uid=0 auid=0 ses=257484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638401.929:4239319): pid=14140 uid=0 auid=1055 ses=257483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638401.932:4239320): pid=14140 uid=0 auid=1055 ses=257483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674638402.977:4239321): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674638402.977:4239321): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad09d965010 items=0 ppid=1588 pid=14177 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638402.977:4239321): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132332E3133322E3233322E3139382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A32343A3539002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.002:4239322): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674638403.002:4239322): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b62b6aa7010 items=0 ppid=1588 pid=14178 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.002:4239322): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E3231382E3130322E3131302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A32393A3134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.005:4239323): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674638403.005:4239323): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1692c9a010 items=0 ppid=1588 pid=14179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.005:4239323): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134332E3131352E3132332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A32393A3237002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.014:4239324): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674638403.014:4239324): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af822899010 items=0 ppid=1588 pid=14180 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.014:4239324): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033362E3135322E3135392E3137382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A33373A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.019:4239325): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674638403.019:4239325): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad14845a010 items=0 ppid=1588 pid=14181 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.019:4239325): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E38392E3131322E33312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A33383A3431002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.032:4239326): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674638403.032:4239326): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af29b42c010 items=0 ppid=1588 pid=14182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.032:4239326): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3133382E35362E35312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A33383A3535002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.038:4239327): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674638403.038:4239327): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b30037d4010 items=0 ppid=1588 pid=14183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.038:4239327): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3137332E3230332E3232312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A34303A3332002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.049:4239328): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674638403.049:4239328): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad453366010 items=0 ppid=1588 pid=14184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.049:4239328): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E3233362E36332E3133302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A35303A3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.065:4239329): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674638403.065:4239329): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0de9675010 items=0 ppid=1588 pid=14185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.065:4239329): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3138372E3139352E36372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A35313A3538002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.091:4239330): table=filter family=2 entries=1024
type=SYSCALL msg=audit(1674638403.091:4239330): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b359b7e7010 items=0 ppid=1588 pid=14186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.091:4239330): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E382E32322E33302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430383A35343A3237002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.117:4239331): table=filter family=2 entries=1023
type=SYSCALL msg=audit(1674638403.117:4239331): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6cee52e010 items=0 ppid=1588 pid=14187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.117:4239331): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138322E3135312E32372E35382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A30313A3232002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.128:4239332): table=filter family=2 entries=1022
type=SYSCALL msg=audit(1674638403.128:4239332): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b83e2171010 items=0 ppid=1588 pid=14188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.128:4239332): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E33342E3234302E32392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A31353A3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674638403.133:4239333): table=filter family=2 entries=1021
type=SYSCALL msg=audit(1674638403.133:4239333): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0939a03010 items=0 ppid=1588 pid=14189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638403.133:4239333): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134332E3131342E3137382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A31393A3333002D6A0044524F50
type=CRED_DISP msg=audit(1674638405.021:4239334): pid=14138 uid=0 auid=0 ses=257481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638405.025:4239335): pid=14138 uid=0 auid=0 ses=257481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674638423.166:4239336): avc: denied { name_connect } for pid=14099 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674638423.166:4239336): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdb40b7310 a2=10 a3=7ffdb40b730c items=0 ppid=5547 pid=14099 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638423.166:4239336): proctitle="dovecot/auth"
type=AVC msg=audit(1674638423.185:4239337): avc: denied { write } for pid=14120 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674638423.185:4239337): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc288bb210 a2=6e a3=63d0f457 items=0 ppid=5547 pid=14120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638423.185:4239337): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674638461.058:4239338): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638461.059:4239339): pid=14532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638461.060:4239340): pid=14532 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257485 res=1
type=USER_START msg=audit(1674638461.086:4239341): pid=14532 uid=0 auid=1055 ses=257485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638461.090:4239342): pid=14532 uid=0 auid=1055 ses=257485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638461.445:4239343): pid=14532 uid=0 auid=1055 ses=257485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638461.449:4239344): pid=14532 uid=0 auid=1055 ses=257485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674638465.045:4239345): pid=14563 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.046:4239346): pid=14563 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.046:4239347): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.076:4239348): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.080:4239349): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.080:4239350): pid=14563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.112:4239351): pid=14567 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.113:4239352): pid=14567 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.115:4239353): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.138:4239354): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.141:4239355): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.142:4239356): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.170:4239357): pid=14573 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.171:4239358): pid=14573 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.171:4239359): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.190:4239360): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.194:4239361): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.194:4239362): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.354:4239363): pid=14581 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.355:4239364): pid=14581 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.355:4239365): pid=14581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.372:4239366): pid=14581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.376:4239367): pid=14581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.376:4239368): pid=14581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.408:4239369): pid=14585 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.408:4239370): pid=14585 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.409:4239371): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.432:4239372): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.436:4239373): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.436:4239374): pid=14585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.466:4239375): pid=14590 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.466:4239376): pid=14590 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.466:4239377): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.488:4239378): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.494:4239379): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.494:4239380): pid=14590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.537:4239381): pid=14598 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.537:4239382): pid=14598 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.537:4239383): pid=14598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.555:4239384): pid=14598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.559:4239385): pid=14598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.559:4239386): pid=14598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.589:4239387): pid=14601 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.589:4239388): pid=14601 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.589:4239389): pid=14601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.603:4239390): pid=14601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.608:4239391): pid=14601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.608:4239392): pid=14601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.638:4239393): pid=14606 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.639:4239394): pid=14606 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.639:4239395): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.660:4239396): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.664:4239397): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.665:4239398): pid=14606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.694:4239399): pid=14610 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.694:4239400): pid=14610 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.695:4239401): pid=14610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.715:4239402): pid=14610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.719:4239403): pid=14610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.719:4239404): pid=14610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638465.745:4239405): pid=14615 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638465.746:4239406): pid=14615 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674638465.746:4239407): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638465.768:4239408): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638465.772:4239409): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638465.772:4239410): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638467.967:4239411): pid=14635 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638467.968:4239412): pid=14635 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674638467.968:4239413): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638467.990:4239414): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638468.063:4239415): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638468.064:4239416): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638468.098:4239417): pid=14641 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638468.098:4239418): pid=14641 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674638468.098:4239419): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638468.119:4239420): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638468.208:4239421): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638468.208:4239422): pid=14641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638468.237:4239423): pid=14647 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638468.237:4239424): pid=14647 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674638468.237:4239425): pid=14647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638468.253:4239426): pid=14647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674638468.288:4239427): avc: denied { write } for pid=14120 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674638468.288:4239427): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc288bb210 a2=6e a3=63d0f484 items=0 ppid=5547 pid=14120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638468.288:4239427): proctitle=646F7665636F742F61757468002D77
type=USER_END msg=audit(1674638468.405:4239428): pid=14647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638468.405:4239429): pid=14647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638468.506:4239430): pid=14662 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638468.507:4239431): pid=14662 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674638468.507:4239432): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638468.529:4239433): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638468.533:4239434): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638468.534:4239435): pid=14662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638468.568:4239436): pid=14667 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638468.568:4239437): pid=14667 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D79413169386D71676F636F6A596846422E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674638468.569:4239438): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638468.586:4239439): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638468.589:4239440): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638468.589:4239441): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638468.619:4239442): pid=14674 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638468.620:4239443): pid=14674 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D79413169386D71676F636F6A596846422E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674638468.620:4239444): pid=14674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638468.639:4239445): pid=14674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638468.648:4239446): pid=14674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638468.648:4239447): pid=14674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674638468.665:4239448): avc: denied { read append } for pid=14655 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674638468.665:4239448): avc: denied { open } for pid=14655 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638468.665:4239448): arch=c000003e syscall=2 success=yes exit=8 a0=5653fcd32a60 a1=402 a2=7ffdc6aea160 a3=7ffdc6ae9be0 items=0 ppid=5547 pid=14655 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638468.665:4239448): proctitle="dovecot/imap"
type=AVC msg=audit(1674638468.666:4239449): avc: denied { getattr } for pid=14655 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638468.666:4239449): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffdc6aea0c0 a2=7ffdc6aea0c0 a3=7ffdc6ae9b20 items=0 ppid=5547 pid=14655 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638468.666:4239449): proctitle="dovecot/imap"
type=AVC msg=audit(1674638468.666:4239450): avc: denied { write } for pid=14655 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638468.666:4239450): arch=c000003e syscall=2 success=yes exit=10 a0=5653fcd37960 a1=2 a2=7ffdc6ae9e60 a3=7ffdc6ae9920 items=0 ppid=5547 pid=14655 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638468.666:4239450): proctitle="dovecot/imap"
type=AVC msg=audit(1674638468.666:4239451): avc: denied { lock } for pid=14655 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638468.666:4239451): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffdc6ae9d60 a3=63d0f484 items=0 ppid=5547 pid=14655 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638468.666:4239451): proctitle="dovecot/imap"
type=AVC msg=audit(1674638468.666:4239452): avc: denied { read } for pid=14655 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674638468.666:4239452): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5653fcd60300 a2=90800 a3=0 items=0 ppid=5547 pid=14655 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638468.666:4239452): proctitle="dovecot/imap"
type=AVC msg=audit(1674638468.667:4239453): avc: denied { getattr } for pid=14655 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638468.667:4239453): arch=c000003e syscall=4 success=yes exit=0 a0=5653fcd22a60 a1=7ffdc6aea110 a2=7ffdc6aea110 a3=6f632e6f72676173 items=0 ppid=5547 pid=14655 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638468.667:4239453): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674638468.687:4239454): pid=14682 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638468.687:4239455): pid=14682 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D79413169386D71676F636F6A596846422E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674638468.688:4239456): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638468.705:4239457): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638468.711:4239458): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638468.711:4239459): pid=14682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638468.738:4239460): pid=14690 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638468.738:4239461): pid=14690 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674638468.738:4239462): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638468.755:4239463): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638468.763:4239464): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638468.763:4239465): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638469.187:4239466): pid=14717 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638469.188:4239467): pid=14717 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674638469.188:4239468): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638469.213:4239469): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638469.229:4239470): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638469.229:4239471): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638469.872:4239472): pid=14754 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638469.872:4239473): pid=14754 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674638469.872:4239474): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638469.896:4239475): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638469.901:4239476): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638469.901:4239477): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638469.933:4239478): pid=14757 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638469.933:4239479): pid=14757 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674638469.934:4239480): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638469.953:4239481): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638469.957:4239482): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638469.957:4239483): pid=14757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638469.982:4239484): pid=14762 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638469.983:4239485): pid=14762 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674638469.983:4239486): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638469.998:4239487): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638470.008:4239488): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638470.008:4239489): pid=14762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638470.041:4239490): pid=14767 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638470.041:4239491): pid=14767 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674638470.041:4239492): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638470.059:4239493): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638470.247:4239494): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638470.247:4239495): pid=14767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674638470.726:4239496): avc: denied { write } for pid=14773 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674638470.726:4239496): arch=c000003e syscall=21 success=yes exit=0 a0=56350fe634c0 a1=2 a2=7b48 a3=7ffc142ff220 items=0 ppid=5547 pid=14773 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638470.726:4239496): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674638471.307:4239497): pid=14782 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638471.307:4239498): pid=14782 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674638471.307:4239499): pid=14782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638471.333:4239500): pid=14782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638471.418:4239501): pid=14782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638471.418:4239502): pid=14782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638471.463:4239503): pid=14788 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638471.463:4239504): pid=14788 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674638471.463:4239505): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638471.485:4239506): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674638471.843:4239507): avc: denied { name_connect } for pid=14099 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674638471.843:4239507): arch=c000003e syscall=42 success=no exit=-115 a0=1a a1=7ffdb40b7310 a2=10 a3=7ffdb40b730c items=0 ppid=5547 pid=14099 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638471.843:4239507): proctitle="dovecot/auth"
type=USER_END msg=audit(1674638473.785:4239508): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638473.785:4239509): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638474.027:4239510): pid=14850 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638474.028:4239511): pid=14850 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777776C6574737374616C6B666F6F642F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777776C6574737374616C6B666F6F642F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674638474.028:4239512): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638474.044:4239513): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638475.460:4239514): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638475.460:4239515): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638475.754:4239516): pid=14866 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638475.755:4239517): pid=14866 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674638475.755:4239518): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638475.772:4239519): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638477.536:4239520): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638477.536:4239521): pid=14866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638477.807:4239522): pid=14883 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638477.807:4239523): pid=14883 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674638477.808:4239524): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638477.825:4239525): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638479.134:4239526): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638479.134:4239527): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638479.259:4239528): pid=14900 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638479.259:4239529): pid=14900 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674638479.260:4239530): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638479.283:4239531): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638479.815:4239532): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638479.815:4239533): pid=14900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638479.978:4239534): pid=14908 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638479.978:4239535): pid=14908 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674638479.978:4239536): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638479.999:4239537): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638482.384:4239538): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638482.384:4239539): pid=14908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638482.665:4239540): pid=14934 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638482.665:4239541): pid=14934 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674638482.665:4239542): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638482.685:4239543): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638483.861:4239544): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638483.862:4239545): pid=14934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638484.122:4239546): pid=14952 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638484.122:4239547): pid=14952 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674638484.122:4239548): pid=14952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638484.146:4239549): pid=14952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638485.351:4239550): pid=14952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638485.351:4239551): pid=14952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638486.215:4239552): pid=14989 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674638486.215:4239553): pid=14989 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674638486.215:4239554): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674638486.238:4239555): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674638487.465:4239556): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674638487.465:4239557): pid=14989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674638521.480:4239558): pid=15215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638521.480:4239559): pid=15215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638521.482:4239560): pid=15215 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257486 res=1
type=USER_START msg=audit(1674638521.508:4239561): pid=15215 uid=0 auid=1055 ses=257486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638521.519:4239562): pid=15215 uid=0 auid=1055 ses=257486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638521.939:4239563): pid=15215 uid=0 auid=1055 ses=257486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638521.947:4239564): pid=15215 uid=0 auid=1055 ses=257486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674638581.966:4239565): pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638581.966:4239566): pid=15587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638581.966:4239567): pid=15587 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257487 res=1
type=USER_START msg=audit(1674638582.008:4239568): pid=15587 uid=0 auid=1055 ses=257487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638582.025:4239569): pid=15587 uid=0 auid=1055 ses=257487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638582.427:4239570): pid=15587 uid=0 auid=1055 ses=257487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638582.432:4239571): pid=15587 uid=0 auid=1055 ses=257487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674638641.448:4239572): pid=15930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638641.448:4239573): pid=15930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638641.448:4239574): pid=15930 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257488 res=1
type=USER_START msg=audit(1674638641.462:4239575): pid=15930 uid=0 auid=1055 ses=257488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638641.463:4239576): pid=15930 uid=0 auid=1055 ses=257488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638641.825:4239577): pid=15930 uid=0 auid=1055 ses=257488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638641.827:4239578): pid=15930 uid=0 auid=1055 ses=257488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674638682.488:4239579): avc: denied { read } for pid=16191 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674638682.488:4239579): avc: denied { open } for pid=16191 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638682.488:4239579): arch=c000003e syscall=2 success=yes exit=18 a0=5634885b0f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=16191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638682.488:4239579): proctitle="dovecot/auth"
type=AVC msg=audit(1674638682.488:4239580): avc: denied { getattr } for pid=16191 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638682.488:4239580): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffffce1fb00 a2=7ffffce1fb00 a3=fffffc00 items=0 ppid=5547 pid=16191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638682.488:4239580): proctitle="dovecot/auth"
type=AVC msg=audit(1674638685.594:4239581): avc: denied { name_connect } for pid=16191 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674638685.594:4239581): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffffce1f8f0 a2=10 a3=7ffffce1f8ec items=0 ppid=5547 pid=16191 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638685.594:4239581): proctitle="dovecot/auth"
type=AVC msg=audit(1674638685.634:4239582): avc: denied { write } for pid=16212 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674638685.634:4239582): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffca8d844f0 a2=6e a3=63d0f55d items=0 ppid=5547 pid=16212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638685.634:4239582): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674638701.291:4239583): table=filter family=2 entries=1020
type=SYSCALL msg=audit(1674638701.291:4239583): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2acb2595f010 items=0 ppid=16313 pid=16319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638701.291:4239583): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3137392E38382E313036002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674638701.841:4239584): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638701.842:4239585): pid=16324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638701.842:4239586): pid=16324 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257489 res=1
type=USER_ACCT msg=audit(1674638701.858:4239587): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638701.858:4239588): pid=16323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638701.858:4239589): pid=16323 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257490 res=1
type=USER_START msg=audit(1674638701.860:4239590): pid=16324 uid=0 auid=1055 ses=257489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638701.862:4239591): pid=16324 uid=0 auid=1055 ses=257489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674638701.892:4239592): pid=16323 uid=0 auid=0 ses=257490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638701.894:4239593): pid=16323 uid=0 auid=0 ses=257490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638702.251:4239594): pid=16324 uid=0 auid=1055 ses=257489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638702.263:4239595): pid=16324 uid=0 auid=1055 ses=257489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638705.321:4239596): pid=16323 uid=0 auid=0 ses=257490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638705.323:4239597): pid=16323 uid=0 auid=0 ses=257490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674638706.086:4239598): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638706.086:4239599): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638706.086:4239600): pid=16364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16364 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674638706.351:4239601): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=16364 suid=74 rport=58137 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.229.132.184 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674638706.351:4239602): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=16364 suid=74 rport=58137 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.229.132.184 terminal=? res=success'
type=USER_AUTH msg=audit(1674638707.590:4239603): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.229.132.184 addr=125.229.132.184 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638709.098:4239604): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.229.132.184 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638709.537:4239605): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.229.132.184 addr=125.229.132.184 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638711.318:4239606): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.229.132.184 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638711.995:4239607): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.229.132.184 addr=125.229.132.184 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638713.716:4239608): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.229.132.184 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674638713.966:4239609): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16364 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638713.967:4239610): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16364 suid=74 rport=58137 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.229.132.184 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638713.968:4239611): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638713.968:4239612): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638713.969:4239613): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674638713.969:4239614): pid=16363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.229.132.184 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674638742.573:4239615): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638742.573:4239616): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638742.573:4239617): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16593 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674638743.312:4239618): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=16593 suid=74 rport=41866 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674638743.313:4239619): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=16593 suid=74 rport=41866 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674638744.058:4239620): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638745.644:4239621): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674638745.883:4239622): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16593 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638745.884:4239623): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16593 suid=74 rport=41866 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638745.885:4239624): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638745.885:4239625): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638745.885:4239626): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16588 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674638745.885:4239627): pid=16588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674638761.349:4239628): pid=16695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638761.349:4239629): pid=16695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638761.351:4239630): pid=16695 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257491 res=1
type=USER_START msg=audit(1674638761.375:4239631): pid=16695 uid=0 auid=1055 ses=257491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638761.378:4239632): pid=16695 uid=0 auid=1055 ses=257491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638761.812:4239633): pid=16695 uid=0 auid=1055 ses=257491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638761.830:4239634): pid=16695 uid=0 auid=1055 ses=257491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674638768.690:4239635): avc: denied { read } for pid=16741 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674638768.690:4239635): avc: denied { open } for pid=16741 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638768.690:4239635): arch=c000003e syscall=2 success=yes exit=18 a0=55689ca64f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=16741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638768.690:4239635): proctitle="dovecot/auth"
type=AVC msg=audit(1674638768.690:4239636): avc: denied { getattr } for pid=16741 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674638768.690:4239636): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffca2254e20 a2=7ffca2254e20 a3=fffffc00 items=0 ppid=5547 pid=16741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638768.690:4239636): proctitle="dovecot/auth"
type=AVC msg=audit(1674638771.171:4239637): avc: denied { name_connect } for pid=16741 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674638771.171:4239637): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffca2254c10 a2=10 a3=7ffca2254c0c items=0 ppid=5547 pid=16741 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638771.171:4239637): proctitle="dovecot/auth"
type=AVC msg=audit(1674638771.206:4239638): avc: denied { write } for pid=16754 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674638771.206:4239638): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffeec4a2880 a2=6e a3=63d0f5b3 items=0 ppid=5547 pid=16754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638771.206:4239638): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674638821.884:4239639): pid=17161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638821.884:4239640): pid=17161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638821.886:4239641): pid=17161 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257492 res=1
type=USER_START msg=audit(1674638821.918:4239642): pid=17161 uid=0 auid=1055 ses=257492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638821.930:4239643): pid=17161 uid=0 auid=1055 ses=257492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638822.240:4239644): pid=17161 uid=0 auid=1055 ses=257492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638822.242:4239645): pid=17161 uid=0 auid=1055 ses=257492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674638834.317:4239646): avc: denied { name_connect } for pid=16741 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674638834.317:4239646): arch=c000003e syscall=42 success=no exit=-115 a0=14 a1=7ffca2254c10 a2=10 a3=7ffca2254c0c items=0 ppid=5547 pid=16741 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638834.317:4239646): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674638835.441:4239647): table=filter family=2 entries=1021
type=SYSCALL msg=audit(1674638835.441:4239647): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b199900d010 items=0 ppid=17240 pid=17246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638835.441:4239647): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231302E34362E3231362E323030002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674638881.262:4239648): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638881.262:4239649): pid=17506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638881.263:4239650): pid=17506 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257493 res=1
type=USER_ACCT msg=audit(1674638881.268:4239651): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638881.268:4239652): pid=17507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638881.268:4239653): pid=17507 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257494 res=1
type=USER_START msg=audit(1674638881.315:4239654): pid=17506 uid=0 auid=0 ses=257493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674638881.318:4239655): pid=17507 uid=0 auid=1055 ses=257494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638881.320:4239656): pid=17507 uid=0 auid=1055 ses=257494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638881.321:4239657): pid=17506 uid=0 auid=0 ses=257493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638881.384:4239658): pid=17506 uid=0 auid=0 ses=257493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638881.386:4239659): pid=17506 uid=0 auid=0 ses=257493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638881.758:4239660): pid=17507 uid=0 auid=1055 ses=257494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638881.758:4239661): pid=17507 uid=0 auid=1055 ses=257494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674638923.718:4239662): avc: denied { write } for pid=17775 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674638923.718:4239662): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe7dec8190 a2=6e a3=63d0f64b items=0 ppid=5547 pid=17775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674638923.718:4239662): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674638941.783:4239663): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674638941.783:4239664): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674638941.785:4239665): pid=17885 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257495 res=1
type=USER_START msg=audit(1674638941.807:4239666): pid=17885 uid=0 auid=1055 ses=257495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674638941.808:4239667): pid=17885 uid=0 auid=1055 ses=257495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674638942.227:4239668): pid=17885 uid=0 auid=1055 ses=257495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674638942.229:4239669): pid=17885 uid=0 auid=1055 ses=257495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674638952.687:4239670): pid=17950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638952.688:4239671): pid=17950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638952.688:4239672): pid=17950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674638952.862:4239673): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=17950 suid=74 rport=26946 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674638952.862:4239674): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=17950 suid=74 rport=26946 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=USER_AUTH msg=audit(1674638953.650:4239675): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=62.233.50.248 addr=62.233.50.248 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674638955.928:4239676): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674638956.109:4239677): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17950 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638956.109:4239678): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17950 suid=74 rport=26946 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638956.111:4239679): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638956.111:4239680): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674638956.112:4239681): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674638956.112:4239682): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674639001.245:4239683): pid=18248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639001.245:4239684): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639001.245:4239685): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639001.245:4239686): pid=18248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639001.245:4239687): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639001.245:4239688): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639001.246:4239689): pid=18248 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257496 res=1
type=LOGIN msg=audit(1674639001.246:4239691): pid=18249 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257498 res=1
type=LOGIN msg=audit(1674639001.246:4239690): pid=18250 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257497 res=1
type=USER_START msg=audit(1674639001.296:4239692): pid=18249 uid=0 auid=0 ses=257498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639001.297:4239693): pid=18248 uid=0 auid=0 ses=257496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639001.298:4239694): pid=18250 uid=0 auid=1055 ses=257497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639001.298:4239695): pid=18249 uid=0 auid=0 ses=257498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639001.298:4239696): pid=18248 uid=0 auid=0 ses=257496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639001.299:4239697): pid=18250 uid=0 auid=1055 ses=257497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639001.332:4239698): pid=18248 uid=0 auid=0 ses=257496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639001.338:4239699): pid=18248 uid=0 auid=0 ses=257496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639001.592:4239700): pid=18250 uid=0 auid=1055 ses=257497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639001.595:4239701): pid=18250 uid=0 auid=1055 ses=257497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639004.653:4239702): pid=18249 uid=0 auid=0 ses=257498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639004.664:4239703): pid=18249 uid=0 auid=0 ses=257498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639060.638:4239704): avc: denied { read } for pid=18615 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674639060.638:4239704): avc: denied { open } for pid=18615 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639060.638:4239704): arch=c000003e syscall=2 success=yes exit=18 a0=561615edaf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=18615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639060.638:4239704): proctitle="dovecot/auth"
type=AVC msg=audit(1674639060.638:4239705): avc: denied { getattr } for pid=18615 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639060.638:4239705): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffda16bec60 a2=7ffda16bec60 a3=fffffc00 items=0 ppid=5547 pid=18615 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639060.638:4239705): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674639061.683:4239706): pid=18620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639061.683:4239707): pid=18620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639061.689:4239708): pid=18620 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257499 res=1
type=USER_START msg=audit(1674639061.710:4239709): pid=18620 uid=0 auid=1055 ses=257499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639061.712:4239710): pid=18620 uid=0 auid=1055 ses=257499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639062.036:4239711): avc: denied { name_connect } for pid=18615 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674639062.036:4239711): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffda16bea50 a2=10 a3=7ffda16bea4c items=0 ppid=5547 pid=18615 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639062.036:4239711): proctitle="dovecot/auth"
type=AVC msg=audit(1674639062.084:4239712): avc: denied { write } for pid=18632 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674639062.084:4239712): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffea277b1b0 a2=6e a3=63d0f6d6 items=0 ppid=5547 pid=18632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639062.084:4239712): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674639062.136:4239713): pid=18620 uid=0 auid=1055 ses=257499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639062.137:4239714): pid=18620 uid=0 auid=1055 ses=257499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674639077.499:4239715): table=filter family=2 entries=1022
type=SYSCALL msg=audit(1674639077.499:4239715): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af92f959010 items=0 ppid=18712 pid=18717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639077.499:4239715): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231392E3132392E3233362E313734002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=AVC msg=audit(1674639079.660:4239716): avc: denied { write } for pid=18632 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674639079.660:4239716): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffea277b1b0 a2=6e a3=63d0f6e7 items=0 ppid=5547 pid=18632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639079.660:4239716): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674639121.178:4239717): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639121.178:4239718): pid=19067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639121.178:4239719): pid=19067 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257500 res=1
type=USER_START msg=audit(1674639121.203:4239720): pid=19067 uid=0 auid=1055 ses=257500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639121.219:4239721): pid=19067 uid=0 auid=1055 ses=257500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639121.674:4239722): pid=19067 uid=0 auid=1055 ses=257500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639121.676:4239723): pid=19067 uid=0 auid=1055 ses=257500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639163.928:4239724): avc: denied { name_connect } for pid=18615 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674639163.928:4239724): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffda16bea50 a2=10 a3=7ffda16bea4c items=0 ppid=5547 pid=18615 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639163.928:4239724): proctitle="dovecot/auth"
type=AVC msg=audit(1674639164.452:4239725): avc: denied { read append } for pid=19326 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674639164.452:4239725): avc: denied { open } for pid=19326 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639164.452:4239725): arch=c000003e syscall=2 success=yes exit=8 a0=55cc080f1a60 a1=402 a2=7ffdb3b44d60 a3=7ffdb3b447e0 items=0 ppid=5547 pid=19326 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639164.452:4239725): proctitle="dovecot/imap"
type=AVC msg=audit(1674639164.453:4239726): avc: denied { getattr } for pid=19326 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639164.453:4239726): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffdb3b44cc0 a2=7ffdb3b44cc0 a3=7ffdb3b44720 items=0 ppid=5547 pid=19326 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639164.453:4239726): proctitle="dovecot/imap"
type=AVC msg=audit(1674639164.453:4239727): avc: denied { write } for pid=19326 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639164.453:4239727): arch=c000003e syscall=2 success=yes exit=10 a0=55cc080f6960 a1=2 a2=7ffdb3b44a60 a3=7ffdb3b44520 items=0 ppid=5547 pid=19326 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639164.453:4239727): proctitle="dovecot/imap"
type=AVC msg=audit(1674639164.453:4239728): avc: denied { lock } for pid=19326 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639164.453:4239728): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffdb3b44960 a3=63d0f73c items=0 ppid=5547 pid=19326 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639164.453:4239728): proctitle="dovecot/imap"
type=AVC msg=audit(1674639164.453:4239729): avc: denied { read } for pid=19326 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674639164.453:4239729): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55cc0811f300 a2=90800 a3=0 items=0 ppid=5547 pid=19326 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639164.453:4239729): proctitle="dovecot/imap"
type=AVC msg=audit(1674639164.454:4239730): avc: denied { getattr } for pid=19326 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639164.454:4239730): arch=c000003e syscall=4 success=yes exit=0 a0=55cc080e1a60 a1=7ffdb3b44d10 a2=7ffdb3b44d10 a3=6f632e6f72676173 items=0 ppid=5547 pid=19326 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639164.454:4239730): proctitle="dovecot/imap"
type=AVC msg=audit(1674639166.348:4239731): avc: denied { write } for pid=19338 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674639166.348:4239731): arch=c000003e syscall=21 success=yes exit=0 a0=5559959d14c0 a1=2 a2=7b48 a3=7ffd3d028ba0 items=0 ppid=5547 pid=19338 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639166.348:4239731): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674639181.699:4239732): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639181.699:4239733): pid=19422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639181.699:4239734): pid=19422 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257501 res=1
type=USER_START msg=audit(1674639181.720:4239735): pid=19422 uid=0 auid=1055 ses=257501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639181.721:4239736): pid=19422 uid=0 auid=1055 ses=257501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639182.045:4239737): pid=19422 uid=0 auid=1055 ses=257501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639182.048:4239738): pid=19422 uid=0 auid=1055 ses=257501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639241.070:4239739): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639241.070:4239740): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639241.071:4239741): pid=19769 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257502 res=1
type=USER_START msg=audit(1674639241.086:4239742): pid=19769 uid=0 auid=1055 ses=257502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639241.089:4239743): pid=19769 uid=0 auid=1055 ses=257502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639241.444:4239744): pid=19769 uid=0 auid=1055 ses=257502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639241.446:4239745): pid=19769 uid=0 auid=1055 ses=257502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639301.486:4239746): pid=20135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639301.486:4239747): pid=20135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639301.486:4239748): pid=20135 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257503 res=1
type=USER_ACCT msg=audit(1674639301.490:4239749): pid=20133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639301.490:4239750): pid=20133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639301.490:4239751): pid=20133 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257504 res=1
type=USER_ACCT msg=audit(1674639301.491:4239752): pid=20132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639301.491:4239753): pid=20132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639301.492:4239754): pid=20132 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257505 res=1
type=USER_ACCT msg=audit(1674639301.507:4239755): pid=20134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639301.507:4239756): pid=20134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639301.507:4239757): pid=20134 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257506 res=1
type=USER_START msg=audit(1674639301.565:4239758): pid=20135 uid=0 auid=1055 ses=257503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639301.574:4239759): pid=20135 uid=0 auid=1055 ses=257503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639301.580:4239760): pid=20133 uid=0 auid=0 ses=257504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639301.580:4239761): pid=20132 uid=0 auid=0 ses=257505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639301.582:4239762): pid=20134 uid=0 auid=0 ses=257506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639301.585:4239763): pid=20132 uid=0 auid=0 ses=257505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639301.586:4239764): pid=20133 uid=0 auid=0 ses=257504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639301.588:4239765): pid=20134 uid=0 auid=0 ses=257506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639301.820:4239766): pid=20133 uid=0 auid=0 ses=257504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639301.865:4239767): pid=20133 uid=0 auid=0 ses=257504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639301.995:4239768): pid=20134 uid=0 auid=0 ses=257506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639302.053:4239769): pid=20134 uid=0 auid=0 ses=257506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639302.303:4239770): pid=20135 uid=0 auid=1055 ses=257503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639302.320:4239771): pid=20135 uid=0 auid=1055 ses=257503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639305.351:4239772): pid=20132 uid=0 auid=0 ses=257505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639305.353:4239773): pid=20132 uid=0 auid=0 ses=257505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639307.000:4239774): avc: denied { read } for pid=20198 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674639307.000:4239774): avc: denied { open } for pid=20198 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639307.000:4239774): arch=c000003e syscall=2 success=yes exit=18 a0=55aebe2a9f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639307.000:4239774): proctitle="dovecot/auth"
type=AVC msg=audit(1674639307.000:4239775): avc: denied { getattr } for pid=20198 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639307.000:4239775): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe603a5080 a2=7ffe603a5080 a3=fffffc00 items=0 ppid=5547 pid=20198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639307.000:4239775): proctitle="dovecot/auth"
type=AVC msg=audit(1674639308.864:4239776): avc: denied { name_connect } for pid=20198 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674639308.864:4239776): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe603a4e70 a2=10 a3=7ffe603a4e6c items=0 ppid=5547 pid=20198 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639308.864:4239776): proctitle="dovecot/auth"
type=AVC msg=audit(1674639308.922:4239777): avc: denied { write } for pid=20209 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674639308.922:4239777): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc69ec1e60 a2=6e a3=63d0f7cc items=0 ppid=5547 pid=20209 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639308.922:4239777): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674639315.335:4239778): table=filter family=2 entries=1023
type=SYSCALL msg=audit(1674639315.335:4239778): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2dd22e0010 items=0 ppid=20244 pid=20249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639315.335:4239778): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3138392E3233332E3134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674639324.243:4239779): table=filter family=2 entries=1024
type=SYSCALL msg=audit(1674639324.243:4239779): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b0b8b0e4010 items=0 ppid=20300 pid=20305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639324.243:4239779): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003230332E3133302E3234322E313739002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=NETFILTER_CFG msg=audit(1674639324.300:4239780): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674639324.300:4239780): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6e5ab10010 items=0 ppid=20300 pid=20310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639324.300:4239780): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132332E3133382E3139392E3636002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674639361.406:4239781): pid=20550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639361.406:4239782): pid=20550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639361.408:4239783): pid=20550 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257507 res=1
type=USER_START msg=audit(1674639361.465:4239784): pid=20550 uid=0 auid=1055 ses=257507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639361.476:4239785): pid=20550 uid=0 auid=1055 ses=257507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639361.887:4239786): pid=20550 uid=0 auid=1055 ses=257507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639361.890:4239787): pid=20550 uid=0 auid=1055 ses=257507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639403.478:4239788): avc: denied { name_connect } for pid=20815 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674639403.478:4239788): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffdc506c150 a2=10 a3=7ffdc506c14c items=0 ppid=5547 pid=20815 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639403.478:4239788): proctitle="dovecot/auth"
type=AVC msg=audit(1674639403.515:4239789): avc: denied { write } for pid=20847 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674639403.515:4239789): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffb4e213f0 a2=6e a3=63d0f82b items=0 ppid=5547 pid=20847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639403.515:4239789): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674639421.914:4239790): pid=20999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639421.914:4239791): pid=20999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639421.914:4239792): pid=20999 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257508 res=1
type=USER_START msg=audit(1674639421.950:4239793): pid=20999 uid=0 auid=1055 ses=257508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639421.952:4239794): pid=20999 uid=0 auid=1055 ses=257508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639422.430:4239795): pid=20999 uid=0 auid=1055 ses=257508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639422.433:4239796): pid=20999 uid=0 auid=1055 ses=257508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639481.452:4239797): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639481.452:4239798): pid=21344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639481.453:4239799): pid=21344 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257509 res=1
type=USER_START msg=audit(1674639481.474:4239800): pid=21344 uid=0 auid=1055 ses=257509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639481.476:4239801): pid=21344 uid=0 auid=1055 ses=257509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639481.909:4239802): pid=21344 uid=0 auid=1055 ses=257509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639481.921:4239803): pid=21344 uid=0 auid=1055 ses=257509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639541.944:4239804): pid=21699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639541.944:4239805): pid=21698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639541.944:4239806): pid=21698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639541.945:4239807): pid=21698 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257510 res=1
type=CRED_ACQ msg=audit(1674639541.947:4239808): pid=21699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639541.947:4239809): pid=21699 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257511 res=1
type=USER_START msg=audit(1674639542.053:4239810): pid=21699 uid=0 auid=1055 ses=257511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639542.053:4239811): pid=21699 uid=0 auid=1055 ses=257511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639542.056:4239812): pid=21698 uid=0 auid=0 ses=257510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639542.057:4239813): pid=21698 uid=0 auid=0 ses=257510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639542.468:4239814): pid=21699 uid=0 auid=1055 ses=257511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639542.488:4239815): pid=21699 uid=0 auid=1055 ses=257511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639543.625:4239816): pid=21698 uid=0 auid=0 ses=257510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639543.626:4239817): pid=21698 uid=0 auid=0 ses=257510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639601.643:4239818): pid=22048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639601.643:4239819): pid=22049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639601.643:4239820): pid=22049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639601.643:4239821): pid=22048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639601.643:4239822): pid=22048 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257512 res=1
type=LOGIN msg=audit(1674639601.643:4239823): pid=22049 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257513 res=1
type=USER_ACCT msg=audit(1674639601.658:4239824): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639601.658:4239825): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639601.658:4239826): pid=22047 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257514 res=1
type=USER_START msg=audit(1674639601.744:4239827): pid=22049 uid=0 auid=1055 ses=257513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639601.745:4239828): pid=22048 uid=0 auid=0 ses=257512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639601.745:4239829): pid=22047 uid=0 auid=0 ses=257514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639601.745:4239830): pid=22047 uid=0 auid=0 ses=257514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639601.750:4239831): pid=22048 uid=0 auid=0 ses=257512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639601.753:4239832): pid=22049 uid=0 auid=1055 ses=257513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639601.815:4239833): pid=22047 uid=0 auid=0 ses=257514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639601.829:4239834): pid=22047 uid=0 auid=0 ses=257514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639602.202:4239835): avc: denied { read } for pid=22071 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674639602.202:4239835): avc: denied { open } for pid=22071 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639602.202:4239835): arch=c000003e syscall=2 success=yes exit=18 a0=557456966f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639602.202:4239835): proctitle="dovecot/auth"
type=AVC msg=audit(1674639602.202:4239836): avc: denied { getattr } for pid=22071 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639602.202:4239836): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd688cf490 a2=7ffd688cf490 a3=fffffc00 items=0 ppid=5547 pid=22071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639602.202:4239836): proctitle="dovecot/auth"
type=CRED_DISP msg=audit(1674639602.289:4239837): pid=22049 uid=0 auid=1055 ses=257513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639602.293:4239838): pid=22049 uid=0 auid=1055 ses=257513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639603.957:4239839): avc: denied { name_connect } for pid=22071 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674639603.957:4239839): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd688cf280 a2=10 a3=7ffd688cf27c items=0 ppid=5547 pid=22071 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639603.957:4239839): proctitle="dovecot/auth"
type=AVC msg=audit(1674639604.015:4239840): avc: denied { write } for pid=22086 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674639604.015:4239840): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff5bfc7ef0 a2=6e a3=63d0f8f4 items=0 ppid=5547 pid=22086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639604.015:4239840): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674639605.294:4239841): pid=22048 uid=0 auid=0 ses=257512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639605.299:4239842): pid=22048 uid=0 auid=0 ses=257512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639661.320:4239843): pid=22422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639661.320:4239844): pid=22422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639661.321:4239845): pid=22422 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257515 res=1
type=USER_START msg=audit(1674639661.338:4239846): pid=22422 uid=0 auid=1055 ses=257515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639661.339:4239847): pid=22422 uid=0 auid=1055 ses=257515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639661.668:4239848): pid=22422 uid=0 auid=1055 ses=257515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639661.671:4239849): pid=22422 uid=0 auid=1055 ses=257515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639721.687:4239850): pid=22766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639721.687:4239851): pid=22766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639721.688:4239852): pid=22766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257516 res=1
type=USER_START msg=audit(1674639721.704:4239853): pid=22766 uid=0 auid=1055 ses=257516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639721.706:4239854): pid=22766 uid=0 auid=1055 ses=257516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639722.026:4239855): pid=22766 uid=0 auid=1055 ses=257516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639722.028:4239856): pid=22766 uid=0 auid=1055 ses=257516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639726.968:4239857): avc: denied { read } for pid=22801 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674639726.968:4239857): avc: denied { open } for pid=22801 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639726.968:4239857): arch=c000003e syscall=2 success=yes exit=18 a0=55c7a7148f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639726.968:4239857): proctitle="dovecot/auth"
type=AVC msg=audit(1674639726.968:4239858): avc: denied { getattr } for pid=22801 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674639726.968:4239858): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdd5bcaf30 a2=7ffdd5bcaf30 a3=fffffc00 items=0 ppid=5547 pid=22801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639726.968:4239858): proctitle="dovecot/auth"
type=AVC msg=audit(1674639730.367:4239859): avc: denied { name_connect } for pid=22801 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674639730.367:4239859): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffdd5bcad20 a2=10 a3=7ffdd5bcad1c items=0 ppid=5547 pid=22801 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639730.367:4239859): proctitle="dovecot/auth"
type=AVC msg=audit(1674639730.411:4239860): avc: denied { write } for pid=22864 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674639730.411:4239860): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdc5023dd0 a2=6e a3=63d0f972 items=0 ppid=5547 pid=22864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639730.411:4239860): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674639781.060:4239861): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639781.060:4239862): pid=23209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639781.060:4239863): pid=23209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639781.060:4239864): pid=23210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639781.061:4239865): pid=23209 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257517 res=1
type=LOGIN msg=audit(1674639781.062:4239866): pid=23210 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257518 res=1
type=USER_START msg=audit(1674639781.095:4239867): pid=23210 uid=0 auid=1055 ses=257518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639781.097:4239868): pid=23209 uid=0 auid=0 ses=257517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639781.100:4239869): pid=23209 uid=0 auid=0 ses=257517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639781.107:4239870): pid=23210 uid=0 auid=1055 ses=257518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639781.166:4239871): pid=23209 uid=0 auid=0 ses=257517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639781.168:4239872): pid=23209 uid=0 auid=0 ses=257517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639781.452:4239873): pid=23210 uid=0 auid=1055 ses=257518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639781.454:4239874): pid=23210 uid=0 auid=1055 ses=257518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674639793.466:4239875): avc: denied { name_connect } for pid=22801 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674639793.466:4239875): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdd5bcad20 a2=10 a3=7ffdd5bcad1c items=0 ppid=5547 pid=22801 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639793.466:4239875): proctitle="dovecot/auth"
type=AVC msg=audit(1674639793.501:4239876): avc: denied { write } for pid=23296 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674639793.501:4239876): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd90216080 a2=6e a3=63d0f9b1 items=0 ppid=5547 pid=23296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674639793.501:4239876): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674639841.507:4239877): pid=23564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639841.507:4239878): pid=23564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639841.510:4239879): pid=23564 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257519 res=1
type=USER_START msg=audit(1674639841.530:4239880): pid=23564 uid=0 auid=1055 ses=257519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639841.534:4239881): pid=23564 uid=0 auid=1055 ses=257519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639842.436:4239882): pid=23564 uid=0 auid=1055 ses=257519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639842.442:4239883): pid=23564 uid=0 auid=1055 ses=257519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639901.472:4239884): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639901.472:4239885): pid=23919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639901.474:4239886): pid=23919 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257520 res=1
type=USER_ACCT msg=audit(1674639901.487:4239887): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639901.487:4239888): pid=23920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639901.487:4239889): pid=23920 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257521 res=1
type=USER_START msg=audit(1674639901.508:4239890): pid=23919 uid=0 auid=0 ses=257520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639901.510:4239891): pid=23919 uid=0 auid=0 ses=257520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674639901.523:4239892): pid=23920 uid=0 auid=1055 ses=257521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639901.527:4239893): pid=23920 uid=0 auid=1055 ses=257521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639902.118:4239894): pid=23920 uid=0 auid=1055 ses=257521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639902.123:4239895): pid=23920 uid=0 auid=1055 ses=257521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639904.991:4239896): pid=23919 uid=0 auid=0 ses=257520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639904.993:4239897): pid=23919 uid=0 auid=0 ses=257520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674639962.026:4239898): pid=24295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674639962.026:4239899): pid=24295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674639962.026:4239900): pid=24295 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257522 res=1
type=USER_START msg=audit(1674639962.061:4239901): pid=24295 uid=0 auid=1055 ses=257522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674639962.065:4239902): pid=24295 uid=0 auid=1055 ses=257522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674639962.449:4239903): pid=24295 uid=0 auid=1055 ses=257522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674639962.451:4239904): pid=24295 uid=0 auid=1055 ses=257522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674640021.474:4239905): pid=24634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640021.485:4239906): pid=24634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640021.485:4239907): pid=24634 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257523 res=1
type=USER_START msg=audit(1674640021.548:4239908): pid=24634 uid=0 auid=1055 ses=257523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640021.553:4239909): pid=24634 uid=0 auid=1055 ses=257523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640022.052:4239910): pid=24634 uid=0 auid=1055 ses=257523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640022.056:4239911): pid=24634 uid=0 auid=1055 ses=257523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640056.704:4239912): avc: denied { read } for pid=24858 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674640056.704:4239912): avc: denied { open } for pid=24858 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640056.704:4239912): arch=c000003e syscall=2 success=yes exit=18 a0=55590088bf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=24858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640056.704:4239912): proctitle="dovecot/auth"
type=AVC msg=audit(1674640056.704:4239913): avc: denied { getattr } for pid=24858 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640056.704:4239913): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd114c0230 a2=7ffd114c0230 a3=fffffc00 items=0 ppid=5547 pid=24858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640056.704:4239913): proctitle="dovecot/auth"
type=AVC msg=audit(1674640056.844:4239914): avc: denied { name_connect } for pid=24858 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674640056.844:4239914): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd114c0020 a2=10 a3=7ffd114c001c items=0 ppid=5547 pid=24858 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640056.844:4239914): proctitle="dovecot/auth"
type=AVC msg=audit(1674640056.881:4239915): avc: denied { write } for pid=24869 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674640056.881:4239915): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd6202a460 a2=6e a3=63d0fab8 items=0 ppid=5547 pid=24869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640056.881:4239915): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674640081.083:4239916): pid=25086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640081.083:4239917): pid=25086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640081.085:4239918): pid=25086 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257524 res=1
type=USER_START msg=audit(1674640081.126:4239919): pid=25086 uid=0 auid=1055 ses=257524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640081.128:4239920): pid=25086 uid=0 auid=1055 ses=257524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640081.547:4239921): pid=25086 uid=0 auid=1055 ses=257524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640081.549:4239922): pid=25086 uid=0 auid=1055 ses=257524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674640141.563:4239923): pid=25447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640141.563:4239924): pid=25447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640141.563:4239925): pid=25447 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257525 res=1
type=USER_START msg=audit(1674640141.579:4239926): pid=25447 uid=0 auid=1055 ses=257525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640141.580:4239927): pid=25447 uid=0 auid=1055 ses=257525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640141.913:4239928): pid=25447 uid=0 auid=1055 ses=257525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640141.936:4239929): pid=25447 uid=0 auid=1055 ses=257525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640161.711:4239930): avc: denied { name_connect } for pid=24858 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674640161.711:4239930): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd114c0020 a2=10 a3=7ffd114c001c items=0 ppid=5547 pid=24858 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640161.711:4239930): proctitle="dovecot/auth"
type=AVC msg=audit(1674640161.748:4239931): avc: denied { write } for pid=25561 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674640161.748:4239931): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd6ef9b480 a2=6e a3=63d0fb21 items=0 ppid=5547 pid=25561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640161.748:4239931): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674640201.945:4239932): pid=25804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640201.945:4239933): pid=25804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640201.945:4239934): pid=25804 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257526 res=1
type=USER_ACCT msg=audit(1674640201.993:4239935): pid=25802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640201.993:4239936): pid=25802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640201.993:4239937): pid=25802 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257527 res=1
type=USER_ACCT msg=audit(1674640201.993:4239938): pid=25803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640201.993:4239939): pid=25803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640201.993:4239940): pid=25803 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257528 res=1
type=USER_ACCT msg=audit(1674640202.049:4239941): pid=25805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640202.049:4239942): pid=25805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640202.049:4239943): pid=25805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257529 res=1
type=USER_START msg=audit(1674640202.188:4239944): pid=25804 uid=0 auid=0 ses=257526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640202.188:4239945): pid=25803 uid=0 auid=0 ses=257528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640202.189:4239946): pid=25802 uid=0 auid=0 ses=257527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640202.190:4239947): pid=25805 uid=0 auid=1055 ses=257529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640202.192:4239948): pid=25803 uid=0 auid=0 ses=257528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640202.192:4239949): pid=25802 uid=0 auid=0 ses=257527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640202.193:4239950): pid=25804 uid=0 auid=0 ses=257526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640202.196:4239951): pid=25805 uid=0 auid=1055 ses=257529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640202.278:4239952): pid=25802 uid=0 auid=0 ses=257527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640202.280:4239953): pid=25802 uid=0 auid=0 ses=257527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640202.311:4239954): pid=25804 uid=0 auid=0 ses=257526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640202.314:4239955): pid=25804 uid=0 auid=0 ses=257526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640202.761:4239956): pid=25805 uid=0 auid=1055 ses=257529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640202.765:4239957): pid=25805 uid=0 auid=1055 ses=257529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640205.756:4239958): pid=25803 uid=0 auid=0 ses=257528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640205.758:4239959): pid=25803 uid=0 auid=0 ses=257528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640252.575:4239960): avc: denied { name_connect } for pid=24858 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674640252.575:4239960): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd114c0020 a2=10 a3=7ffd114c001c items=0 ppid=5547 pid=24858 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640252.575:4239960): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674640253.672:4239961): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674640253.672:4239961): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b883047e010 items=0 ppid=26140 pid=26146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640253.672:4239961): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3231312E3139342E37002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543039
type=USER_ACCT msg=audit(1674640261.778:4239962): pid=26187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640261.778:4239963): pid=26187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640261.779:4239964): pid=26187 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257530 res=1
type=USER_START msg=audit(1674640261.800:4239965): pid=26187 uid=0 auid=1055 ses=257530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640261.802:4239966): pid=26187 uid=0 auid=1055 ses=257530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640262.199:4239967): pid=26187 uid=0 auid=1055 ses=257530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640262.201:4239968): pid=26187 uid=0 auid=1055 ses=257530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640264.955:4239969): avc: denied { write } for pid=26218 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674640264.955:4239969): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc8ca8b610 a2=6e a3=63d0fb88 items=0 ppid=5547 pid=26218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640264.955:4239969): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674640299.151:4239970): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674640299.151:4239970): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b86a8a69010 items=0 ppid=26429 pid=26435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640299.151:4239970): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132332E3233322E31392E313934002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674640321.217:4239971): pid=26568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640321.217:4239972): pid=26568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640321.218:4239973): pid=26568 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257531 res=1
type=USER_START msg=audit(1674640321.232:4239974): pid=26568 uid=0 auid=1055 ses=257531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640321.233:4239975): pid=26568 uid=0 auid=1055 ses=257531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640321.590:4239976): pid=26568 uid=0 auid=1055 ses=257531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640321.594:4239977): pid=26568 uid=0 auid=1055 ses=257531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674640381.625:4239978): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640381.627:4239979): pid=26994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640381.627:4239980): pid=26994 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257532 res=1
type=USER_START msg=audit(1674640381.652:4239981): pid=26994 uid=0 auid=1055 ses=257532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640381.654:4239982): pid=26994 uid=0 auid=1055 ses=257532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640382.035:4239983): pid=26994 uid=0 auid=1055 ses=257532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640382.038:4239984): pid=26994 uid=0 auid=1055 ses=257532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640384.961:4239985): avc: denied { write } for pid=26218 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674640384.961:4239985): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc8ca8b610 a2=6e a3=63d0fc00 items=0 ppid=5547 pid=26218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640384.961:4239985): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674640419.723:4239986): avc: denied { name_connect } for pid=24858 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674640419.723:4239986): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffd114c0020 a2=10 a3=7ffd114c001c items=0 ppid=5547 pid=24858 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640419.723:4239986): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674640420.836:4239987): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674640420.836:4239987): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b718824c010 items=0 ppid=27281 pid=27286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640420.836:4239987): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650033392E3136352E3130312E323335002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674640441.069:4239988): pid=27420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640441.069:4239989): pid=27420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640441.070:4239990): pid=27420 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257533 res=1
type=USER_START msg=audit(1674640441.086:4239991): pid=27420 uid=0 auid=1055 ses=257533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640441.088:4239992): pid=27420 uid=0 auid=1055 ses=257533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640441.431:4239993): pid=27420 uid=0 auid=1055 ses=257533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640441.438:4239994): pid=27420 uid=0 auid=1055 ses=257533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640442.528:4239995): avc: denied { read append } for pid=27442 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674640442.528:4239995): avc: denied { open } for pid=27442 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640442.528:4239995): arch=c000003e syscall=2 success=yes exit=8 a0=5583a6f70a60 a1=402 a2=7ffcd6220ec0 a3=7ffcd6220960 items=0 ppid=5547 pid=27442 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640442.528:4239995): proctitle="dovecot/imap"
type=AVC msg=audit(1674640442.528:4239996): avc: denied { getattr } for pid=27442 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640442.528:4239996): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffcd6220e20 a2=7ffcd6220e20 a3=7ffcd62208a0 items=0 ppid=5547 pid=27442 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640442.528:4239996): proctitle="dovecot/imap"
type=AVC msg=audit(1674640442.528:4239997): avc: denied { write } for pid=27442 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640442.528:4239997): arch=c000003e syscall=2 success=yes exit=10 a0=5583a6f75960 a1=2 a2=7ffcd6220bc0 a3=7ffcd6220660 items=0 ppid=5547 pid=27442 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640442.528:4239997): proctitle="dovecot/imap"
type=AVC msg=audit(1674640442.529:4239998): avc: denied { lock } for pid=27442 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640442.529:4239998): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffcd6220ac0 a3=63d0fc3a items=0 ppid=5547 pid=27442 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640442.529:4239998): proctitle="dovecot/imap"
type=AVC msg=audit(1674640442.529:4239999): avc: denied { read } for pid=27442 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674640442.529:4239999): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5583a6f9e300 a2=90800 a3=0 items=0 ppid=5547 pid=27442 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640442.529:4239999): proctitle="dovecot/imap"
type=AVC msg=audit(1674640442.530:4240000): avc: denied { getattr } for pid=27442 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640442.530:4240000): arch=c000003e syscall=4 success=yes exit=0 a0=5583a6f60a60 a1=7ffcd6220e70 a2=7ffcd6220e70 a3=6f632e6f72676173 items=0 ppid=5547 pid=27442 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640442.530:4240000): proctitle="dovecot/imap"
type=AVC msg=audit(1674640444.488:4240001): avc: denied { write } for pid=27459 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674640444.488:4240001): arch=c000003e syscall=21 success=yes exit=0 a0=5626a33794c0 a1=2 a2=7b48 a3=7ffe36c6bce0 items=0 ppid=5547 pid=27459 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640444.488:4240001): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674640501.472:4240002): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640501.472:4240003): pid=27814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640501.474:4240004): pid=27814 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257534 res=1
type=USER_ACCT msg=audit(1674640501.490:4240005): pid=27813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640501.490:4240006): pid=27813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640501.490:4240007): pid=27813 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257535 res=1
type=USER_START msg=audit(1674640501.512:4240008): pid=27814 uid=0 auid=1055 ses=257534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640501.514:4240009): pid=27814 uid=0 auid=1055 ses=257534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640501.624:4240010): pid=27813 uid=0 auid=0 ses=257535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640501.640:4240011): pid=27813 uid=0 auid=0 ses=257535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640502.080:4240012): pid=27814 uid=0 auid=1055 ses=257534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640502.092:4240013): pid=27814 uid=0 auid=1055 ses=257534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640505.290:4240014): pid=27813 uid=0 auid=0 ses=257535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640505.293:4240015): pid=27813 uid=0 auid=0 ses=257535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674640531.533:4240016): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674640531.533:4240016): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b8339078010 items=0 ppid=28026 pid=28031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640531.533:4240016): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3136322E3230322E3836002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674640542.033:4240017): avc: denied { name_connect } for pid=24858 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674640542.033:4240017): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd114c0020 a2=10 a3=7ffd114c001c items=0 ppid=5547 pid=24858 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640542.033:4240017): proctitle="dovecot/auth"
type=AVC msg=audit(1674640545.003:4240018): avc: denied { write } for pid=28129 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674640545.003:4240018): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffccdd69120 a2=6e a3=63d0fca1 items=0 ppid=5547 pid=28129 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640545.003:4240018): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674640549.214:4240019): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674640549.214:4240019): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ac2dbfc6010 items=0 ppid=28153 pid=28158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640549.214:4240019): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E39342E39362E313339002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365430
type=USER_ACCT msg=audit(1674640561.314:4240020): pid=28229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640561.314:4240021): pid=28229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640561.315:4240022): pid=28229 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257536 res=1
type=USER_START msg=audit(1674640561.339:4240023): pid=28229 uid=0 auid=1055 ses=257536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640561.342:4240024): pid=28229 uid=0 auid=1055 ses=257536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640561.711:4240025): pid=28229 uid=0 auid=1055 ses=257536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640561.712:4240026): pid=28229 uid=0 auid=1055 ses=257536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674640621.736:4240027): pid=28591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640621.736:4240028): pid=28591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640621.739:4240029): pid=28591 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257537 res=1
type=USER_START msg=audit(1674640621.755:4240030): pid=28591 uid=0 auid=1055 ses=257537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640621.756:4240031): pid=28591 uid=0 auid=1055 ses=257537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640622.139:4240032): pid=28591 uid=0 auid=1055 ses=257537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640622.145:4240033): pid=28591 uid=0 auid=1055 ses=257537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640625.587:4240034): avc: denied { read } for pid=28622 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674640625.587:4240034): avc: denied { open } for pid=28622 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640625.587:4240034): arch=c000003e syscall=2 success=yes exit=18 a0=5593ca399f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=28622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640625.587:4240034): proctitle="dovecot/auth"
type=AVC msg=audit(1674640625.588:4240035): avc: denied { getattr } for pid=28622 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640625.588:4240035): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe88792ce0 a2=7ffe88792ce0 a3=fffffc00 items=0 ppid=5547 pid=28622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640625.588:4240035): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674640669.106:4240036): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674640669.106:4240036): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae9ea203010 items=0 ppid=28897 pid=28902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640669.106:4240036): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131332E33312E3130372E313634002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674640681.161:4240037): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640681.161:4240038): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640681.161:4240039): pid=28980 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257538 res=1
type=USER_ACCT msg=audit(1674640681.164:4240040): pid=28981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640681.164:4240041): pid=28981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640681.164:4240042): pid=28981 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257539 res=1
type=USER_START msg=audit(1674640681.200:4240043): pid=28980 uid=0 auid=0 ses=257538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640681.201:4240044): pid=28981 uid=0 auid=1055 ses=257539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640681.203:4240045): pid=28981 uid=0 auid=1055 ses=257539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640681.203:4240046): pid=28980 uid=0 auid=0 ses=257538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640681.288:4240047): pid=28980 uid=0 auid=0 ses=257538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640681.314:4240048): pid=28980 uid=0 auid=0 ses=257538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640681.720:4240049): pid=28981 uid=0 auid=1055 ses=257539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640681.735:4240050): pid=28981 uid=0 auid=1055 ses=257539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640696.244:4240051): avc: denied { name_connect } for pid=28622 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674640696.244:4240051): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe88792ad0 a2=10 a3=7ffe88792acc items=0 ppid=5547 pid=28622 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640696.244:4240051): proctitle="dovecot/auth"
type=AVC msg=audit(1674640696.258:4240052): avc: denied { write } for pid=28631 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674640696.258:4240052): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe6eadef50 a2=6e a3=63d0fd38 items=0 ppid=5547 pid=28631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640696.258:4240052): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674640741.755:4240053): pid=29465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640741.756:4240054): pid=29465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640741.756:4240055): pid=29465 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257540 res=1
type=USER_START msg=audit(1674640741.778:4240056): pid=29465 uid=0 auid=1055 ses=257540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640741.790:4240057): pid=29465 uid=0 auid=1055 ses=257540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640742.108:4240058): pid=29465 uid=0 auid=1055 ses=257540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640742.110:4240059): pid=29465 uid=0 auid=1055 ses=257540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674640744.327:4240060): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674640744.327:4240060): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2adae69cc010 items=0 ppid=29491 pid=29496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640744.327:4240060): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132322E3131342E37372E3938002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365430
type=NETFILTER_CFG msg=audit(1674640799.149:4240061): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674640799.149:4240061): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5676f38010 items=0 ppid=29842 pid=29847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640799.149:4240061): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034362E3232382E3230352E323132002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674640801.127:4240063): pid=29861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674640801.127:4240064): pid=29863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674640801.127:4240062): pid=29864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674640801.127:4240065): pid=29862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640801.127:4240066): pid=29862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640801.127:4240067): pid=29864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640801.127:4240068): pid=29861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640801.127:4240069): pid=29863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640801.129:4240070): pid=29862 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257541 res=1
type=LOGIN msg=audit(1674640801.129:4240071): pid=29861 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257542 res=1
type=LOGIN msg=audit(1674640801.129:4240072): pid=29863 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257544 res=1
type=LOGIN msg=audit(1674640801.129:4240073): pid=29864 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257543 res=1
type=USER_START msg=audit(1674640801.191:4240074): pid=29861 uid=0 auid=0 ses=257542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640801.191:4240075): pid=29863 uid=0 auid=0 ses=257544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640801.191:4240076): pid=29862 uid=0 auid=0 ses=257541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640801.194:4240077): pid=29863 uid=0 auid=0 ses=257544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640801.194:4240078): pid=29861 uid=0 auid=0 ses=257542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640801.194:4240079): pid=29864 uid=0 auid=1055 ses=257543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640801.194:4240080): pid=29862 uid=0 auid=0 ses=257541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640801.196:4240081): pid=29864 uid=0 auid=1055 ses=257543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640801.244:4240082): pid=29861 uid=0 auid=0 ses=257542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640801.281:4240083): pid=29861 uid=0 auid=0 ses=257542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640801.323:4240084): pid=29862 uid=0 auid=0 ses=257541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640801.330:4240085): pid=29862 uid=0 auid=0 ses=257541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640801.679:4240086): pid=29864 uid=0 auid=1055 ses=257543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640801.682:4240087): pid=29864 uid=0 auid=1055 ses=257543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640804.635:4240088): pid=29863 uid=0 auid=0 ses=257544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640804.637:4240089): pid=29863 uid=0 auid=0 ses=257544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640805.382:4240090): avc: denied { write } for pid=29617 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674640805.382:4240090): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffffaf3ddf0 a2=6e a3=63d0fda5 items=0 ppid=5547 pid=29617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640805.382:4240090): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674640823.957:4240091): avc: denied { read append } for pid=30027 comm="lmtp" name="maildirsize" dev="vda1" ino=197803444 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674640823.957:4240091): avc: denied { open } for pid=30027 comm="lmtp" path="/home/mrsclean/mail/maildirsize" dev="vda1" ino=197803444 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.957:4240091): arch=c000003e syscall=2 success=yes exit=17 a0=557de0209a00 a1=402 a2=7ffe50101090 a3=fffff800 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.957:4240091): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.960:4240092): avc: denied { getattr } for pid=30027 comm="lmtp" path="/home/mrsclean/mail/dovecot.index.log" dev="vda1" ino=193572065 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.960:4240092): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffe50101f10 a2=7ffe50101f10 a3=7ffe50101960 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.960:4240092): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.961:4240093): avc: denied { write } for pid=30027 comm="lmtp" name="dovecot.index" dev="vda1" ino=196533603 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.961:4240093): arch=c000003e syscall=2 success=yes exit=18 a0=557de0247bb0 a1=2 a2=7ffe50101cb0 a3=7ffe50101760 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.961:4240093): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.962:4240094): avc: denied { read write } for pid=30027 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=194861475 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674640823.962:4240094): avc: denied { open } for pid=30027 comm="lmtp" path="/home/mrsclean/mail/dovecot-uidlist" dev="vda1" ino=194861475 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.962:4240094): arch=c000003e syscall=2 success=yes exit=19 a0=557de023d290 a1=2 a2=7ffe50101f30 a3=7ffe50101be0 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.962:4240094): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.962:4240095): avc: denied { getattr } for pid=30027 comm="lmtp" path="/home/mrsclean/mail/dovecot-uidlist" dev="vda1" ino=194861475 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.962:4240095): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffe50102090 a2=7ffe50102090 a3=7ffe50101a60 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.962:4240095): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.964:4240096): avc: denied { write } for pid=30027 comm="lmtp" name="tmp" dev="vda1" ino=276878864 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674640823.964:4240096): avc: denied { add_name } for pid=30027 comm="lmtp" name="1674640823.M960811P30027.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674640823.964:4240096): avc: denied { create } for pid=30027 comm="lmtp" name="1674640823.M960811P30027.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.964:4240096): arch=c000003e syscall=2 success=yes exit=21 a0=557de019ec30 a1=2c1 a2=1ff a3=7ffe50101b20 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.964:4240096): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.968:4240097): avc: denied { lock } for pid=30027 comm="lmtp" path="/home/mrsclean/mail/dovecot.index.log" dev="vda1" ino=193572065 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.968:4240097): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffe50101b40 a3=63d0fdb7 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.968:4240097): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.969:4240098): avc: denied { remove_name } for pid=30027 comm="lmtp" name="1674640823.M960811P30027.host.nexidigital.com" dev="vda1" ino=277514738 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674640823.969:4240098): avc: denied { rename } for pid=30027 comm="lmtp" name="1674640823.M960811P30027.host.nexidigital.com" dev="vda1" ino=277514738 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.969:4240098): arch=c000003e syscall=82 success=yes exit=0 a0=557de019e598 a1=557de019e5e0 a2=6a00 a3=7ffe50101ae0 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.969:4240098): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.969:4240099): avc: denied { read } for pid=30027 comm="lmtp" name="new" dev="vda1" ino=273803067 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674640823.969:4240099): arch=c000003e syscall=2 success=yes exit=21 a0=557de0254438 a1=0 a2=0 a3=7ffe50101ae0 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.969:4240099): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.973:4240100): avc: denied { lock } for pid=30027 comm="lmtp" path="/home/mrsclean/mail/dovecot.index.cache" dev="vda1" ino=194861479 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.973:4240100): arch=c000003e syscall=72 success=yes exit=0 a0=16 a1=7 a2=7ffe50101e60 a3=63d0fdb7 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.973:4240100): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.974:4240101): avc: denied { unlink } for pid=30027 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=193773293 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.974:4240101): arch=c000003e syscall=87 success=yes exit=0 a0=557de0253c70 a1=7f5a8196e071 a2=2f9 a3=4 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.974:4240101): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.974:4240102): avc: denied { append } for pid=30027 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=194861482 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.974:4240102): arch=c000003e syscall=2 success=yes exit=21 a0=557de0254160 a1=402 a2=7ffe50101fc0 a3=4 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.974:4240102): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.976:4240103): avc: denied { link } for pid=30027 comm="lmtp" name=".temp.host.nexidigital.com.30027.c68786192aad6609" dev="vda1" ino=193773293 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.976:4240103): arch=c000003e syscall=86 success=yes exit=0 a0=557de019f2e8 a1=557de019f260 a2=1 a3=63d0fdb7 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.976:4240103): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674640823.976:4240104): avc: denied { setattr } for pid=30027 comm="lmtp" name=".temp.host.nexidigital.com.30027.c68786192aad6609" dev="vda1" ino=193773293 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640823.976:4240104): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=40d a3=33 items=0 ppid=5547 pid=30027 auid=4294967295 uid=0 gid=1037 euid=1035 suid=0 fsuid=1035 egid=1037 sgid=1037 fsgid=1037 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640823.976:4240104): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674640861.670:4240105): pid=30254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640861.671:4240106): pid=30254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640861.672:4240107): pid=30254 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257545 res=1
type=USER_ACCT msg=audit(1674640861.676:4240108): pid=30255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640861.676:4240109): pid=30255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640861.676:4240110): pid=30255 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257546 res=1
type=USER_START msg=audit(1674640861.770:4240111): pid=30254 uid=0 auid=0 ses=257545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674640861.777:4240112): pid=30255 uid=0 auid=1055 ses=257546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640861.777:4240113): pid=30254 uid=0 auid=0 ses=257545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640861.777:4240114): pid=30255 uid=0 auid=1055 ses=257546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640861.876:4240115): pid=30254 uid=0 auid=0 ses=257545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640861.876:4240116): pid=30254 uid=0 auid=0 ses=257545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640862.280:4240117): pid=30255 uid=0 auid=1055 ses=257546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640862.298:4240118): pid=30255 uid=0 auid=1055 ses=257546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640874.025:4240119): avc: denied { name_connect } for pid=28622 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674640874.025:4240119): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe88792ad0 a2=10 a3=7ffe88792acc items=0 ppid=5547 pid=28622 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640874.025:4240119): proctitle="dovecot/auth"
type=AVC msg=audit(1674640874.038:4240120): avc: denied { write } for pid=29617 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674640874.038:4240120): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffffaf3ddf0 a2=6e a3=63d0fdea items=0 ppid=5547 pid=29617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640874.038:4240120): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674640921.314:4240121): pid=30649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640921.314:4240122): pid=30649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640921.315:4240123): pid=30649 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257547 res=1
type=USER_START msg=audit(1674640921.330:4240124): pid=30649 uid=0 auid=1055 ses=257547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640921.332:4240125): pid=30649 uid=0 auid=1055 ses=257547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640921.803:4240126): pid=30649 uid=0 auid=1055 ses=257547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640921.823:4240127): pid=30649 uid=0 auid=1055 ses=257547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674640981.846:4240128): pid=31051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674640981.847:4240129): pid=31051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674640981.847:4240130): pid=31051 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257548 res=1
type=USER_START msg=audit(1674640981.889:4240131): pid=31051 uid=0 auid=1055 ses=257548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674640981.909:4240132): pid=31051 uid=0 auid=1055 ses=257548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674640982.799:4240133): pid=31051 uid=0 auid=1055 ses=257548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674640982.801:4240134): pid=31051 uid=0 auid=1055 ses=257548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674640997.584:4240135): avc: denied { read } for pid=31175 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674640997.584:4240135): avc: denied { open } for pid=31175 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640997.584:4240135): arch=c000003e syscall=2 success=yes exit=18 a0=559354f2ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=31175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640997.584:4240135): proctitle="dovecot/auth"
type=AVC msg=audit(1674640997.584:4240136): avc: denied { getattr } for pid=31175 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674640997.584:4240136): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc410e1b70 a2=7ffc410e1b70 a3=fffffc00 items=0 ppid=5547 pid=31175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640997.584:4240136): proctitle="dovecot/auth"
type=AVC msg=audit(1674640998.238:4240137): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674640998.238:4240137): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674640998.238:4240137): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674641041.831:4240138): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641041.832:4240139): pid=31554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641041.833:4240140): pid=31554 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257549 res=1
type=USER_START msg=audit(1674641041.848:4240141): pid=31554 uid=0 auid=1055 ses=257549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641041.859:4240142): pid=31554 uid=0 auid=1055 ses=257549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641042.282:4240143): pid=31554 uid=0 auid=1055 ses=257549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641042.284:4240144): pid=31554 uid=0 auid=1055 ses=257549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674641047.401:4240145): avc: denied { write } for pid=31206 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641047.401:4240145): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffa74ad170 a2=6e a3=63d0fe97 items=0 ppid=5547 pid=31206 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641047.401:4240145): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674641048.677:4240146): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674641048.677:4240146): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b4b6ab46010 items=0 ppid=31613 pid=31619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641048.677:4240146): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E36322E38342E313030002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543130
type=USER_ACCT msg=audit(1674641101.301:4240148): pid=32012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674641101.301:4240147): pid=32013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674641101.301:4240149): pid=32011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641101.301:4240150): pid=32013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641101.301:4240151): pid=32012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641101.301:4240152): pid=32011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641101.301:4240153): pid=32013 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257550 res=1
type=LOGIN msg=audit(1674641101.301:4240154): pid=32012 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257551 res=1
type=LOGIN msg=audit(1674641101.301:4240155): pid=32011 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257552 res=1
type=USER_START msg=audit(1674641101.375:4240156): pid=32013 uid=0 auid=1055 ses=257550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674641101.375:4240157): pid=32012 uid=0 auid=0 ses=257551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674641101.376:4240158): pid=32011 uid=0 auid=0 ses=257552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641101.376:4240159): pid=32012 uid=0 auid=0 ses=257551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641101.387:4240160): pid=32013 uid=0 auid=1055 ses=257550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641101.389:4240161): pid=32011 uid=0 auid=0 ses=257552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641101.538:4240162): pid=32012 uid=0 auid=0 ses=257551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641101.565:4240163): pid=32012 uid=0 auid=0 ses=257551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641102.040:4240164): pid=32013 uid=0 auid=1055 ses=257550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641102.092:4240165): pid=32013 uid=0 auid=1055 ses=257550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641104.944:4240166): pid=32011 uid=0 auid=0 ses=257552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641104.947:4240167): pid=32011 uid=0 auid=0 ses=257552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674641161.971:4240168): pid=32485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641161.972:4240169): pid=32485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641161.973:4240170): pid=32485 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257553 res=1
type=USER_START msg=audit(1674641161.995:4240171): pid=32485 uid=0 auid=1055 ses=257553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641161.997:4240172): pid=32485 uid=0 auid=1055 ses=257553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641162.353:4240173): pid=32485 uid=0 auid=1055 ses=257553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641162.356:4240174): pid=32485 uid=0 auid=1055 ses=257553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674641177.216:4240175): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641177.216:4240175): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641177.216:4240175): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674641178.362:4240176): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674641178.362:4240176): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b145362c010 items=0 ppid=32602 pid=32607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641178.362:4240176): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3231332E392E313436002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543130
type=USER_ACCT msg=audit(1674641221.373:4240177): pid=453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641221.373:4240178): pid=453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641221.373:4240179): pid=453 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257554 res=1
type=USER_START msg=audit(1674641221.391:4240180): pid=453 uid=0 auid=1055 ses=257554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641221.391:4240181): pid=453 uid=0 auid=1055 ses=257554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641221.711:4240182): pid=453 uid=0 auid=1055 ses=257554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641221.712:4240183): pid=453 uid=0 auid=1055 ses=257554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674641226.859:4240184): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674641226.859:4240184): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b91094a7010 items=0 ppid=509 pid=515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641226.859:4240184): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138322E38372E3138322E36002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543130
type=AVC msg=audit(1674641227.771:4240185): avc: denied { write } for pid=522 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641227.771:4240185): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe65910a00 a2=6e a3=63d0ff4b items=0 ppid=5547 pid=522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641227.771:4240185): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674641281.736:4240186): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641281.736:4240187): pid=976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641281.736:4240188): pid=976 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257555 res=1
type=USER_START msg=audit(1674641281.752:4240189): pid=976 uid=0 auid=1055 ses=257555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641281.754:4240190): pid=976 uid=0 auid=1055 ses=257555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641282.045:4240191): pid=976 uid=0 auid=1055 ses=257555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641282.048:4240192): pid=976 uid=0 auid=1055 ses=257555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674641292.836:4240193): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641292.836:4240193): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641292.836:4240193): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674641293.939:4240194): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674641293.939:4240194): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aff5cc28010 items=0 ppid=1075 pid=1082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641293.939:4240194): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3135352E3131302E323530002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674641327.758:4240195): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641327.759:4240196): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641327.759:4240197): pid=1449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641327.889:4240198): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=1449 suid=74 rport=37498 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641327.889:4240199): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=1449 suid=74 rport=37498 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=? res=success'
type=USER_AUTH msg=audit(1674641328.558:4240200): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=5.199.130.106 addr=5.199.130.106 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641329.883:4240201): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641330.018:4240202): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1449 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641330.018:4240203): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1449 suid=74 rport=37498 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641330.020:4240204): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641330.020:4240205): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641330.020:4240206): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1448 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641330.020:4240207): pid=1448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674641332.663:4240208): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674641332.663:4240208): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b8c2cd60010 items=0 ppid=1483 pid=1488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641332.663:4240208): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3134332E3131352E3832002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674641341.067:4240210): pid=1543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674641341.067:4240209): pid=1544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641341.068:4240211): pid=1543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641341.068:4240212): pid=1544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641341.069:4240213): pid=1544 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257556 res=1
type=LOGIN msg=audit(1674641341.069:4240214): pid=1543 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257557 res=1
type=USER_START msg=audit(1674641341.119:4240215): pid=1544 uid=0 auid=1055 ses=257556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674641341.119:4240216): pid=1543 uid=0 auid=0 ses=257557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641341.121:4240217): pid=1544 uid=0 auid=1055 ses=257556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641341.121:4240218): pid=1543 uid=0 auid=0 ses=257557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641341.465:4240219): pid=1544 uid=0 auid=1055 ses=257556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641341.468:4240220): pid=1544 uid=0 auid=1055 ses=257556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641342.614:4240221): pid=1543 uid=0 auid=0 ses=257557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641342.618:4240222): pid=1543 uid=0 auid=0 ses=257557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674641401.689:4240223): pid=2037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641401.689:4240224): pid=2037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641401.689:4240225): pid=2037 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257558 res=1
type=USER_ACCT msg=audit(1674641401.695:4240226): pid=2038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641401.695:4240227): pid=2038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641401.695:4240228): pid=2038 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257559 res=1
type=USER_ACCT msg=audit(1674641401.718:4240229): pid=2036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641401.718:4240230): pid=2036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641401.719:4240231): pid=2036 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257560 res=1
type=USER_START msg=audit(1674641401.859:4240232): pid=2038 uid=0 auid=1055 ses=257559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674641401.868:4240233): pid=2036 uid=0 auid=0 ses=257560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674641401.869:4240234): pid=2037 uid=0 auid=0 ses=257558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641401.871:4240235): pid=2036 uid=0 auid=0 ses=257560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641401.873:4240236): pid=2037 uid=0 auid=0 ses=257558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641401.874:4240237): pid=2038 uid=0 auid=1055 ses=257559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641402.167:4240238): pid=2036 uid=0 auid=0 ses=257560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641402.167:4240239): pid=2036 uid=0 auid=0 ses=257560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641402.613:4240240): pid=2038 uid=0 auid=1055 ses=257559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641402.617:4240241): pid=2038 uid=0 auid=1055 ses=257559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674641402.783:4240242): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641402.783:4240242): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641402.783:4240242): proctitle="dovecot/auth"
type=AVC msg=audit(1674641402.902:4240243): avc: denied { write } for pid=2065 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641402.902:4240243): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd2c1186a0 a2=6e a3=63d0fffa items=0 ppid=5547 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641402.902:4240243): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674641405.559:4240244): pid=2037 uid=0 auid=0 ses=257558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641405.561:4240245): pid=2037 uid=0 auid=0 ses=257558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674641451.102:4240246): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641451.102:4240246): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641451.102:4240246): proctitle="dovecot/auth"
type=AVC msg=audit(1674641451.114:4240247): avc: denied { write } for pid=2065 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641451.114:4240247): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd2c1186a0 a2=6e a3=63d1002b items=0 ppid=5547 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641451.114:4240247): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674641458.519:4240248): pid=2501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641458.519:4240249): pid=2501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641458.519:4240250): pid=2501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2501 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641458.624:4240251): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=2501 suid=74 rport=45806 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.154.12.171 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641458.624:4240252): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=2501 suid=74 rport=45806 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.154.12.171 terminal=? res=success'
type=USER_AUTH msg=audit(1674641459.190:4240253): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=45.154.12.171 addr=45.154.12.171 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641459.467:4240254): pid=2509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641459.467:4240255): pid=2509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641459.467:4240256): pid=2509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641459.699:4240257): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=2509 suid=74 rport=59098 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641459.699:4240258): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=2509 suid=74 rport=59098 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=? res=success'
type=USER_AUTH msg=audit(1674641460.762:4240259): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=167.99.152.131 addr=167.99.152.131 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641461.161:4240260): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.154.12.171 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641461.272:4240261): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2501 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641461.272:4240262): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2501 suid=74 rport=45806 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.154.12.171 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641461.275:4240263): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641461.275:4240264): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641461.275:4240265): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641461.275:4240266): pid=2498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.154.12.171 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674641461.584:4240267): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641461.584:4240268): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641461.586:4240269): pid=2526 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257561 res=1
type=USER_START msg=audit(1674641461.610:4240270): pid=2526 uid=0 auid=1055 ses=257561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641461.613:4240271): pid=2526 uid=0 auid=1055 ses=257561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674641461.871:4240272): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674641461.919:4240273): pid=2526 uid=0 auid=1055 ses=257561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641461.935:4240274): pid=2526 uid=0 auid=1055 ses=257561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674641462.109:4240275): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2509 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641462.109:4240276): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2509 suid=74 rport=59098 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641462.112:4240277): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641462.112:4240278): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641462.112:4240279): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2508 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641462.112:4240280): pid=2508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=ssh res=failed'
type=AVC msg=audit(1674641463.337:4240281): avc: denied { read append } for pid=2546 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674641463.337:4240281): avc: denied { open } for pid=2546 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674641463.337:4240281): arch=c000003e syscall=2 success=yes exit=8 a0=562e49659a60 a1=402 a2=7fff795a0ba0 a3=7fff795a0620 items=0 ppid=5547 pid=2546 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641463.337:4240281): proctitle="dovecot/imap"
type=AVC msg=audit(1674641463.337:4240282): avc: denied { getattr } for pid=2546 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674641463.337:4240282): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff795a0b00 a2=7fff795a0b00 a3=7fff795a0560 items=0 ppid=5547 pid=2546 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641463.337:4240282): proctitle="dovecot/imap"
type=AVC msg=audit(1674641463.337:4240283): avc: denied { write } for pid=2546 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674641463.337:4240283): arch=c000003e syscall=2 success=yes exit=10 a0=562e4965e990 a1=2 a2=7fff795a08a0 a3=7fff795a0360 items=0 ppid=5547 pid=2546 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641463.337:4240283): proctitle="dovecot/imap"
type=AVC msg=audit(1674641463.338:4240284): avc: denied { lock } for pid=2546 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674641463.338:4240284): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff795a07a0 a3=63d10037 items=0 ppid=5547 pid=2546 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641463.338:4240284): proctitle="dovecot/imap"
type=AVC msg=audit(1674641463.338:4240285): avc: denied { read } for pid=2546 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674641463.338:4240285): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=562e496872f8 a2=90800 a3=0 items=0 ppid=5547 pid=2546 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641463.338:4240285): proctitle="dovecot/imap"
type=AVC msg=audit(1674641463.338:4240286): avc: denied { getattr } for pid=2546 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674641463.338:4240286): arch=c000003e syscall=4 success=yes exit=0 a0=562e49649a60 a1=7fff795a0b50 a2=7fff795a0b50 a3=6f632e6f72676173 items=0 ppid=5547 pid=2546 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641463.338:4240286): proctitle="dovecot/imap"
type=AVC msg=audit(1674641464.989:4240287): avc: denied { write } for pid=2562 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674641464.989:4240287): arch=c000003e syscall=21 success=yes exit=0 a0=55e30b77d4c0 a1=2 a2=7b48 a3=7ffcf58393e0 items=0 ppid=5547 pid=2562 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641464.989:4240287): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674641520.949:4240288): pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641520.949:4240289): pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641520.949:4240290): pid=2957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641521.219:4240291): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=2957 suid=74 rport=47190 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641521.219:4240292): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=2957 suid=74 rport=47190 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=? res=success'
type=USER_ACCT msg=audit(1674641521.966:4240293): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641521.967:4240294): pid=2963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641521.967:4240295): pid=2963 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257562 res=1
type=USER_START msg=audit(1674641522.013:4240296): pid=2963 uid=0 auid=1055 ses=257562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641522.017:4240297): pid=2963 uid=0 auid=1055 ses=257562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641522.394:4240298): pid=2963 uid=0 auid=1055 ses=257562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641522.397:4240299): pid=2963 uid=0 auid=1055 ses=257562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674641522.500:4240300): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=129.146.217.240 addr=129.146.217.240 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641523.020:4240301): pid=2980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641523.020:4240302): pid=2980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641523.020:4240303): pid=2980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641523.255:4240304): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=2980 suid=74 rport=43878 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641523.258:4240305): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=2980 suid=74 rport=43878 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=? res=success'
type=USER_AUTH msg=audit(1674641524.338:4240306): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=51.222.13.180 addr=51.222.13.180 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641524.457:4240307): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641524.719:4240308): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2957 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641524.719:4240309): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2957 suid=74 rport=47190 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641524.720:4240310): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641524.720:4240311): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641524.720:4240312): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641524.720:4240313): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641526.234:4240314): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641526.474:4240315): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2980 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641526.474:4240316): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2980 suid=74 rport=43878 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641526.477:4240317): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641526.477:4240318): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641526.477:4240319): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641526.477:4240320): pid=2979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=ssh res=failed'
type=AVC msg=audit(1674641548.013:4240321): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641548.013:4240321): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641548.013:4240321): proctitle="dovecot/auth"
type=AVC msg=audit(1674641548.062:4240322): avc: denied { write } for pid=3169 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641548.062:4240322): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff96f23950 a2=6e a3=63d1008c items=0 ppid=5547 pid=3169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641548.062:4240322): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674641559.786:4240323): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674641559.786:4240323): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aaf11544010 items=0 ppid=3272 pid=3279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641559.786:4240323): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E3232312E39372E323330002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=CRYPTO_KEY_USER msg=audit(1674641565.865:4240324): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641565.865:4240325): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641565.865:4240326): pid=3321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641566.009:4240327): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=3321 suid=74 rport=55604 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641566.010:4240328): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=3321 suid=74 rport=55604 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=? res=success'
type=USER_AUTH msg=audit(1674641566.717:4240329): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=5.199.130.106 addr=5.199.130.106 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641568.714:4240330): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641568.862:4240331): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3321 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641568.862:4240332): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3321 suid=74 rport=55604 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641568.865:4240333): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641568.866:4240334): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641568.866:4240335): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3320 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641568.866:4240336): pid=3320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=5.199.130.106 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674641569.716:4240337): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641569.716:4240337): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5934420010 items=0 ppid=3348 pid=3352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641569.716:4240337): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674641569.721:4240338): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674641569.721:4240338): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0077cb9010 items=0 ppid=3348 pid=3353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641569.721:4240338): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674641569.727:4240339): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641569.727:4240339): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fade138b010 items=0 ppid=3348 pid=3354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641569.727:4240339): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674641569.732:4240340): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674641569.732:4240340): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdc7e7b1010 items=0 ppid=3348 pid=3355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641569.732:4240340): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674641570.066:4240341): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641570.066:4240341): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f86a0f0d010 items=0 ppid=3348 pid=3366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641570.066:4240341): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003136322E3234332E3233372E3930002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641570.076:4240342): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674641570.076:4240342): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f206f2dc010 items=0 ppid=3348 pid=3367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641570.076:4240342): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003136322E3234332E3233372E3930002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674641570.084:4240343): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674641570.084:4240343): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb01fb22010 items=0 ppid=3348 pid=3368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641570.084:4240343): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D7300352E3139392E3133302E313036002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641570.092:4240344): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674641570.092:4240344): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f995ee9c010 items=0 ppid=3348 pid=3369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641570.092:4240344): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D6400352E3139392E3133302E313036002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674641581.428:4240345): pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674641581.428:4240346): pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641581.428:4240347): pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641581.428:4240348): pid=3452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641581.429:4240349): pid=3451 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257563 res=1
type=LOGIN msg=audit(1674641581.429:4240350): pid=3452 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257564 res=1
type=USER_START msg=audit(1674641581.478:4240351): pid=3452 uid=0 auid=1055 ses=257564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674641581.480:4240352): pid=3451 uid=0 auid=0 ses=257563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641581.481:4240353): pid=3452 uid=0 auid=1055 ses=257564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641581.483:4240354): pid=3451 uid=0 auid=0 ses=257563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641581.548:4240355): pid=3451 uid=0 auid=0 ses=257563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641581.558:4240356): pid=3451 uid=0 auid=0 ses=257563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641581.824:4240357): pid=3452 uid=0 auid=1055 ses=257564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641581.825:4240358): pid=3452 uid=0 auid=1055 ses=257564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674641612.334:4240359): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641612.334:4240359): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641612.334:4240359): proctitle="dovecot/auth"
type=AVC msg=audit(1674641616.018:4240360): avc: denied { write } for pid=3815 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641616.018:4240360): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc39fde900 a2=6e a3=63d100d0 items=0 ppid=5547 pid=3815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641616.018:4240360): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674641624.242:4240361): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641624.242:4240361): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aaef8b7d010 items=0 ppid=3872 pid=3877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641624.242:4240361): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3136362E38382E3138002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=CRYPTO_KEY_USER msg=audit(1674641637.677:4240362): pid=3970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641637.677:4240363): pid=3970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641637.678:4240364): pid=3970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641637.912:4240365): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=3970 suid=74 rport=40802 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641637.912:4240366): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=3970 suid=74 rport=40802 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=? res=success'
type=USER_AUTH msg=audit(1674641639.004:4240367): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=51.222.13.180 addr=51.222.13.180 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641641.555:4240368): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641641.802:4240369): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3970 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641641.802:4240370): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3970 suid=74 rport=40802 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641641.805:4240371): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641641.808:4240372): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641641.808:4240373): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641641.808:4240374): pid=3969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.222.13.180 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674641641.853:4240375): pid=4001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641641.853:4240376): pid=4001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641641.854:4240377): pid=4001 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257565 res=1
type=USER_START msg=audit(1674641641.896:4240378): pid=4001 uid=0 auid=1055 ses=257565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641641.910:4240379): pid=4001 uid=0 auid=1055 ses=257565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641642.259:4240380): pid=4001 uid=0 auid=1055 ses=257565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641642.295:4240381): pid=4001 uid=0 auid=1055 ses=257565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674641643.301:4240382): pid=4024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641643.301:4240383): pid=4024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641643.301:4240384): pid=4024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641643.395:4240385): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641643.395:4240386): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641643.395:4240387): pid=4026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4026 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641643.444:4240388): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4026 suid=74 rport=56860 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641643.444:4240389): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4026 suid=74 rport=56860 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641643.529:4240390): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4024 suid=74 rport=44796 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641643.530:4240391): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4024 suid=74 rport=44796 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=? res=success'
type=USER_AUTH msg=audit(1674641643.840:4240392): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=139.255.248.37 addr=139.255.248.37 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674641643.987:4240393): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641643.987:4240393): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe216df1010 items=0 ppid=4036 pid=4040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641643.987:4240393): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674641643.994:4240394): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641643.994:4240394): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff23609a010 items=0 ppid=4036 pid=4041 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641643.994:4240394): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674641644.000:4240395): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674641644.000:4240395): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc599bb2010 items=0 ppid=4036 pid=4042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641644.000:4240395): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674641644.006:4240396): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641644.006:4240396): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f36a145c010 items=0 ppid=4036 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641644.006:4240396): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674641644.376:4240397): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641644.376:4240397): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9e7f185010 items=0 ppid=4036 pid=4058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641644.376:4240397): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730035312E3235302E37392E3535002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641644.412:4240398): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641644.412:4240398): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcda7553010 items=0 ppid=4036 pid=4059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641644.412:4240398): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640035312E3235302E37392E3535002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674641644.420:4240399): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674641644.420:4240399): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7aa6e8d010 items=0 ppid=4036 pid=4060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641644.420:4240399): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035312E3232322E31332E313830002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641644.429:4240400): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641644.429:4240400): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feda570b010 items=0 ppid=4036 pid=4061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641644.429:4240400): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035312E3232322E31332E313830002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674641644.591:4240401): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=167.99.152.131 addr=167.99.152.131 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641646.073:4240402): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641646.126:4240403): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4026 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641646.126:4240404): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4026 suid=74 rport=56860 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641646.129:4240405): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641646.129:4240406): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641646.129:4240407): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641646.129:4240408): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641646.628:4240409): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641646.863:4240410): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4024 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641646.863:4240411): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4024 suid=74 rport=44796 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641646.865:4240412): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641646.865:4240413): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641646.865:4240414): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4023 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641646.865:4240415): pid=4023 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.99.152.131 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674641649.023:4240416): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641649.023:4240416): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcb57d22010 items=0 ppid=4104 pid=4108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641649.023:4240416): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674641649.029:4240417): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641649.029:4240417): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5a6340d010 items=0 ppid=4104 pid=4109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641649.029:4240417): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674641649.035:4240418): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674641649.035:4240418): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0da164c010 items=0 ppid=4104 pid=4110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641649.035:4240418): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674641649.040:4240419): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641649.040:4240419): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f56597bd010 items=0 ppid=4104 pid=4111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641649.040:4240419): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674641649.435:4240420): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641649.435:4240420): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f848d97b010 items=0 ppid=4104 pid=4122 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641649.435:4240420): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730034352E372E3232382E3632002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641649.445:4240421): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641649.445:4240421): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff4bf1bb010 items=0 ppid=4104 pid=4123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641649.445:4240421): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640034352E372E3232382E3632002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674641649.455:4240422): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674641649.455:4240422): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f15d0c73010 items=0 ppid=4104 pid=4124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641649.455:4240422): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003136372E39392E3135322E313331002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641649.464:4240423): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641649.464:4240423): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f573c782010 items=0 ppid=4104 pid=4125 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641649.464:4240423): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003136372E39392E3135322E313331002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674641659.148:4240424): pid=4193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641659.148:4240425): pid=4193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641659.148:4240426): pid=4193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641659.223:4240427): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4193 suid=74 rport=47212 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=156.255.111.137 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641659.223:4240428): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4193 suid=74 rport=47212 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=156.255.111.137 terminal=? res=success'
type=USER_AUTH msg=audit(1674641659.687:4240429): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=156.255.111.137 addr=156.255.111.137 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641661.118:4240430): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=156.255.111.137 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641661.208:4240431): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4193 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641661.208:4240432): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4193 suid=74 rport=47212 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=156.255.111.137 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641661.210:4240433): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641661.210:4240434): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641661.210:4240435): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641661.211:4240436): pid=4192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=156.255.111.137 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641694.188:4240437): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641694.188:4240438): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641694.188:4240439): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641694.229:4240440): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=4450 suid=74 rport=46228 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641694.229:4240441): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=4450 suid=74 rport=46228 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=? res=success'
type=USER_AUTH msg=audit(1674641694.522:4240442): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=20.198.226.97 addr=20.198.226.97 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641696.423:4240443): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641696.464:4240444): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4450 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641696.464:4240445): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4450 suid=74 rport=46228 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641696.466:4240446): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641696.466:4240447): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641696.466:4240448): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4449 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641696.466:4240449): pid=4449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674641701.313:4240450): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641701.313:4240451): pid=4495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641701.313:4240452): pid=4495 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257566 res=1
type=USER_ACCT msg=audit(1674641701.320:4240453): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641701.321:4240454): pid=4497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641701.321:4240455): pid=4497 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257567 res=1
type=USER_ACCT msg=audit(1674641701.321:4240456): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641701.321:4240457): pid=4496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641701.321:4240458): pid=4496 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257568 res=1
type=USER_START msg=audit(1674641701.496:4240459): pid=4496 uid=0 auid=0 ses=257568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674641701.496:4240460): pid=4497 uid=0 auid=1055 ses=257567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674641701.499:4240461): pid=4495 uid=0 auid=0 ses=257566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641701.501:4240462): pid=4495 uid=0 auid=0 ses=257566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641701.503:4240463): pid=4497 uid=0 auid=1055 ses=257567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641701.508:4240464): pid=4496 uid=0 auid=0 ses=257568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641701.747:4240465): pid=4495 uid=0 auid=0 ses=257566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641701.784:4240466): pid=4495 uid=0 auid=0 ses=257566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641702.106:4240467): pid=4497 uid=0 auid=1055 ses=257567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641702.109:4240468): pid=4497 uid=0 auid=1055 ses=257567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674641704.772:4240469): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641704.773:4240470): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641704.773:4240471): pid=4539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674641705.272:4240472): pid=4496 uid=0 auid=0 ses=257568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641705.275:4240473): pid=4496 uid=0 auid=0 ses=257568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_SESSION msg=audit(1674641705.613:4240474): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=4539 suid=74 rport=45916 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641705.613:4240475): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=4539 suid=74 rport=45916 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674641706.422:4240476): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641708.640:4240477): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641708.903:4240478): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4539 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641708.903:4240479): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4539 suid=74 rport=45916 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641708.905:4240480): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641708.906:4240481): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641708.906:4240482): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641708.906:4240483): pid=4527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=AVC msg=audit(1674641728.146:4240484): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641728.146:4240484): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641728.146:4240484): proctitle="dovecot/auth"
type=AVC msg=audit(1674641728.183:4240485): avc: denied { write } for pid=4713 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641728.183:4240485): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffff1583400 a2=6e a3=63d10140 items=0 ppid=5547 pid=4713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641728.183:4240485): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674641738.047:4240486): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641738.047:4240487): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641738.047:4240488): pid=4794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4794 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641738.153:4240489): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4794 suid=74 rport=34746 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.154.12.171 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641738.153:4240490): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4794 suid=74 rport=34746 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=45.154.12.171 terminal=? res=success'
type=USER_AUTH msg=audit(1674641738.732:4240491): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=45.154.12.171 addr=45.154.12.171 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674641739.447:4240492): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641739.447:4240492): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdcf54dc010 items=0 ppid=4809 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641739.447:4240492): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674641739.453:4240493): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641739.453:4240493): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f02ec3be010 items=0 ppid=4809 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641739.453:4240493): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674641739.459:4240494): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674641739.459:4240494): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8e45ec9010 items=0 ppid=4809 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641739.459:4240494): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674641739.464:4240495): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641739.464:4240495): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0deb14d010 items=0 ppid=4809 pid=4815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641739.464:4240495): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674641739.769:4240496): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641739.769:4240496): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4088db9010 items=0 ppid=4809 pid=4825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641739.769:4240496): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131302E3134312E3231322E3132002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641739.778:4240497): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641739.778:4240497): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe9608c6010 items=0 ppid=4809 pid=4826 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641739.778:4240497): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131302E3134312E3231322E3132002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674641739.788:4240498): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674641739.788:4240498): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe7ce1c4010 items=0 ppid=4809 pid=4827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641739.788:4240498): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034352E3135342E31322E313731002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641739.797:4240499): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641739.797:4240499): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f21ffcfe010 items=0 ppid=4809 pid=4828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641739.797:4240499): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034352E3135342E31322E313731002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674641740.343:4240500): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=45.154.12.171 terminal=ssh res=failed'
type=AVC msg=audit(1674641741.323:4240501): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641741.323:4240501): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641741.323:4240501): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674641745.822:4240502): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641745.822:4240503): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641745.822:4240504): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4876 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641745.823:4240505): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4876 suid=74 rport=56128 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641745.823:4240506): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=4876 suid=74 rport=56128 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=? res=success'
type=USER_AUTH msg=audit(1674641746.578:4240507): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=139.255.248.37 addr=139.255.248.37 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641748.952:4240508): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641749.006:4240509): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4876 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641749.006:4240510): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4876 suid=74 rport=56128 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641749.008:4240511): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641749.008:4240512): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641749.008:4240513): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4872 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641749.009:4240514): pid=4872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.255.248.37 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674641749.151:4240515): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641749.151:4240515): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0ec1c55010 items=0 ppid=4903 pid=4909 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641749.151:4240515): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674641749.158:4240516): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641749.158:4240516): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f382c592010 items=0 ppid=4903 pid=4910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641749.158:4240516): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674641749.166:4240517): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674641749.166:4240517): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f52b081d010 items=0 ppid=4903 pid=4911 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641749.166:4240517): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674641749.173:4240518): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674641749.173:4240518): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0c64831010 items=0 ppid=4903 pid=4912 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641749.173:4240518): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674641749.586:4240519): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641749.586:4240519): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f23155c0010 items=0 ppid=4903 pid=4924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641749.586:4240519): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132352E3134302E3234362E3134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641749.594:4240520): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641749.594:4240520): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f493124b010 items=0 ppid=4903 pid=4925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641749.594:4240520): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132352E3134302E3234362E3134002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674641749.602:4240521): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674641749.602:4240521): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2fe0cd8010 items=0 ppid=4903 pid=4926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641749.602:4240521): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003133392E3235352E3234382E3337002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641749.611:4240522): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641749.611:4240522): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8a75ad9010 items=0 ppid=4903 pid=4927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641749.611:4240522): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003133392E3235352E3234382E3337002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674641761.301:4240523): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641761.302:4240524): pid=5011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641761.303:4240525): pid=5011 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257569 res=1
type=USER_START msg=audit(1674641761.326:4240526): pid=5011 uid=0 auid=1055 ses=257569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641761.330:4240527): pid=5011 uid=0 auid=1055 ses=257569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641761.678:4240528): pid=5011 uid=0 auid=1055 ses=257569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641761.680:4240529): pid=5011 uid=0 auid=1055 ses=257569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674641821.725:4240530): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641821.725:4240531): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641821.725:4240532): pid=5641 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257570 res=1
type=USER_START msg=audit(1674641821.758:4240533): pid=5641 uid=0 auid=1055 ses=257570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641821.768:4240534): pid=5641 uid=0 auid=1055 ses=257570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641822.147:4240535): pid=5641 uid=0 auid=1055 ses=257570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641822.151:4240536): pid=5641 uid=0 auid=1055 ses=257570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674641823.327:4240537): avc: denied { name_connect } for pid=31175 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641823.327:4240537): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffc410e1960 a2=10 a3=7ffc410e195c items=0 ppid=5547 pid=31175 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641823.327:4240537): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674641824.451:4240538): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641824.451:4240538): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b36475f5010 items=0 ppid=5674 pid=5681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641824.451:4240538): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131392E3137372E31322E3538002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674641835.290:4240539): avc: denied { write } for pid=5766 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641835.290:4240539): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd0948afe0 a2=6e a3=63d101ab items=0 ppid=5547 pid=5766 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641835.290:4240539): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674641864.005:4240540): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641864.005:4240541): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641864.005:4240542): pid=5995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641864.239:4240543): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=5995 suid=74 rport=47388 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674641864.240:4240544): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=5995 suid=74 rport=47388 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=? res=success'
type=USER_AUTH msg=audit(1674641865.477:4240545): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=129.146.217.240 addr=129.146.217.240 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674641867.521:4240546): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674641867.823:4240547): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5995 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641867.823:4240548): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5995 suid=74 rport=47388 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641867.825:4240549): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641867.825:4240550): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674641867.825:4240551): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674641867.825:4240552): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=129.146.217.240 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674641869.254:4240553): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674641869.254:4240553): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb138431010 items=0 ppid=6043 pid=6048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641869.254:4240553): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674641869.259:4240554): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674641869.259:4240554): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1c467f8010 items=0 ppid=6043 pid=6049 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641869.259:4240554): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674641869.264:4240555): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674641869.264:4240555): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f266c3d3010 items=0 ppid=6043 pid=6050 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641869.264:4240555): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674641869.269:4240556): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674641869.269:4240556): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5cd2980010 items=0 ppid=6043 pid=6051 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641869.269:4240556): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674641869.622:4240557): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674641869.622:4240557): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f889ab0f010 items=0 ppid=6043 pid=6061 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641869.622:4240557): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003136372E39392E31312E3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641869.630:4240558): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641869.630:4240558): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f19508d2010 items=0 ppid=6043 pid=6062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641869.630:4240558): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003136372E39392E31312E3335002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674641869.637:4240559): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674641869.637:4240559): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9d84456010 items=0 ppid=6043 pid=6063 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641869.637:4240559): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003132392E3134362E3231372E323430002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674641869.645:4240560): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674641869.645:4240560): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9c926d1010 items=0 ppid=6043 pid=6064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641869.645:4240560): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003132392E3134362E3231372E323430002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674641881.172:4240561): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641881.173:4240562): pid=6160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641881.174:4240563): pid=6160 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257571 res=1
type=USER_START msg=audit(1674641881.200:4240564): pid=6160 uid=0 auid=1055 ses=257571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641881.204:4240565): pid=6160 uid=0 auid=1055 ses=257571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641881.523:4240566): pid=6160 uid=0 auid=1055 ses=257571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641881.528:4240567): pid=6160 uid=0 auid=1055 ses=257571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674641941.565:4240568): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674641941.565:4240569): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674641941.565:4240570): pid=6688 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257572 res=1
type=USER_START msg=audit(1674641941.582:4240571): pid=6688 uid=0 auid=1055 ses=257572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674641941.584:4240572): pid=6688 uid=0 auid=1055 ses=257572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674641941.914:4240573): pid=6688 uid=0 auid=1055 ses=257572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674641941.916:4240574): pid=6688 uid=0 auid=1055 ses=257572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674641942.718:4240575): avc: denied { read } for pid=6727 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674641942.718:4240575): avc: denied { open } for pid=6727 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674641942.718:4240575): arch=c000003e syscall=2 success=yes exit=18 a0=55ae2c34df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=6727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641942.718:4240575): proctitle="dovecot/auth"
type=AVC msg=audit(1674641942.718:4240576): avc: denied { getattr } for pid=6727 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674641942.718:4240576): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd0b3ad5d0 a2=7ffd0b3ad5d0 a3=fffffc00 items=0 ppid=5547 pid=6727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641942.718:4240576): proctitle="dovecot/auth"
type=AVC msg=audit(1674641943.348:4240577): avc: denied { name_connect } for pid=6727 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674641943.348:4240577): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd0b3ad3c0 a2=10 a3=7ffd0b3ad3bc items=0 ppid=5547 pid=6727 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641943.348:4240577): proctitle="dovecot/auth"
type=AVC msg=audit(1674641943.390:4240578): avc: denied { write } for pid=6759 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674641943.390:4240578): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffec7c5e8a0 a2=6e a3=63d10217 items=0 ppid=5547 pid=6759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674641943.390:4240578): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674642001.945:4240579): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642001.945:4240580): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642001.945:4240581): pid=7312 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257573 res=1
type=USER_ACCT msg=audit(1674642001.980:4240582): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642001.980:4240583): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642001.980:4240584): pid=7311 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257574 res=1
type=USER_ACCT msg=audit(1674642002.010:4240585): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642002.010:4240586): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642002.010:4240587): pid=7310 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257575 res=1
type=USER_ACCT msg=audit(1674642002.042:4240588): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642002.042:4240589): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642002.042:4240590): pid=7309 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257576 res=1
type=USER_START msg=audit(1674642002.055:4240591): pid=7312 uid=0 auid=1055 ses=257573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642002.074:4240592): pid=7311 uid=0 auid=0 ses=257574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642002.074:4240593): pid=7310 uid=0 auid=0 ses=257575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642002.074:4240594): pid=7311 uid=0 auid=0 ses=257574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642002.074:4240595): pid=7310 uid=0 auid=0 ses=257575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642002.109:4240596): pid=7312 uid=0 auid=1055 ses=257573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642002.149:4240597): pid=7309 uid=0 auid=0 ses=257576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642002.162:4240598): pid=7309 uid=0 auid=0 ses=257576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642002.351:4240599): pid=7311 uid=0 auid=0 ses=257574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642002.364:4240600): pid=7309 uid=0 auid=0 ses=257576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642002.383:4240601): pid=7311 uid=0 auid=0 ses=257574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642002.386:4240602): pid=7309 uid=0 auid=0 ses=257576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642002.656:4240603): pid=7312 uid=0 auid=1055 ses=257573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642002.663:4240604): pid=7312 uid=0 auid=1055 ses=257573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674642003.273:4240605): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674642003.273:4240605): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0590e06010 items=0 ppid=1588 pid=7347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.273:4240605): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3130342E3133352E3231302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A32313A3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.300:4240606): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674642003.300:4240606): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4d9ce1e010 items=0 ppid=1588 pid=7348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.300:4240606): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132342E36352E3232372E3135342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A32323A3330002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.305:4240607): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674642003.305:4240607): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1ec8a58010 items=0 ppid=1588 pid=7349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.305:4240607): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130312E33352E3230302E3135332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A32333A3332002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.310:4240608): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674642003.310:4240608): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4645acd010 items=0 ppid=1588 pid=7350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.310:4240608): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003230322E3130342E322E3132322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A32333A3537002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.315:4240609): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674642003.315:4240609): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6ce3fd6010 items=0 ppid=1588 pid=7351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.315:4240609): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3137332E38362E3230322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A34303A3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.321:4240610): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674642003.321:4240610): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac9dde59010 items=0 ppid=1588 pid=7352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.321:4240610): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730034392E39312E3234322E3231352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A34323A3337002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.327:4240611): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674642003.327:4240611): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9340ae1010 items=0 ppid=1588 pid=7353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.327:4240611): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131392E352E3235322E3233312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A34383A3339002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.333:4240612): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674642003.333:4240612): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ab90140b010 items=0 ppid=1588 pid=7354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.333:4240612): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131382E3234342E3132382E33342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A35343A3531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.338:4240613): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674642003.338:4240613): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2afc426a9010 items=0 ppid=1588 pid=7355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.338:4240613): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3139312E3133302E3139382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A35343A3532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.343:4240614): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674642003.343:4240614): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b3e361d8010 items=0 ppid=1588 pid=7356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.343:4240614): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003136332E3137392E3132352E35392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355430393A35353A3031002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.348:4240615): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674642003.348:4240615): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aabade6c010 items=0 ppid=1588 pid=7357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.348:4240615): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130312E3233312E3130382E3137342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A30343A3134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.353:4240616): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674642003.353:4240616): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9ad4514010 items=0 ppid=1588 pid=7358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.353:4240616): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035382E3234362E392E3134362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A31353A3139002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.367:4240617): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674642003.367:4240617): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6da058d010 items=0 ppid=1588 pid=7359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.367:4240617): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131372E3135392E3137342E3232362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A31373A3437002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.373:4240618): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674642003.373:4240618): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af9c3c7c010 items=0 ppid=1588 pid=7360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.373:4240618): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3232312E36342E33352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A31393A3332002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642003.378:4240619): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674642003.378:4240619): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af26b7a1010 items=0 ppid=1588 pid=7361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642003.378:4240619): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3134322E31362E3130352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A31393A3537002D6A0044524F50
type=CRED_DISP msg=audit(1674642005.610:4240620): pid=7310 uid=0 auid=0 ses=257575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642005.612:4240621): pid=7310 uid=0 auid=0 ses=257575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674642012.919:4240622): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642012.919:4240623): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642012.919:4240624): pid=7437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642012.998:4240625): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=7437 suid=74 rport=57702 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=156.255.111.137 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642012.998:4240626): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=7437 suid=74 rport=57702 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=156.255.111.137 terminal=? res=success'
type=USER_AUTH msg=audit(1674642013.501:4240627): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=156.255.111.137 addr=156.255.111.137 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674642014.297:4240628): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674642014.297:4240628): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe4e3b1f010 items=0 ppid=7452 pid=7456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642014.297:4240628): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674642014.303:4240629): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674642014.303:4240629): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdcc6655010 items=0 ppid=7452 pid=7457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642014.303:4240629): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674642014.310:4240630): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674642014.310:4240630): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fecaf21b010 items=0 ppid=7452 pid=7458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642014.310:4240630): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674642014.315:4240631): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674642014.315:4240631): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd5cc189010 items=0 ppid=7452 pid=7459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642014.315:4240631): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674642014.742:4240632): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674642014.742:4240632): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f33e80bb010 items=0 ppid=7452 pid=7473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642014.742:4240632): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003130332E3233362E3230312E3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642014.749:4240633): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674642014.749:4240633): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd6a61b5010 items=0 ppid=7452 pid=7474 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642014.749:4240633): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003130332E3233362E3230312E3536002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674642014.755:4240634): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674642014.755:4240634): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9f635ff010 items=0 ppid=7452 pid=7475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642014.755:4240634): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003135362E3235352E3131312E313337002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642014.763:4240635): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674642014.763:4240635): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f532f89a010 items=0 ppid=7452 pid=7476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642014.763:4240635): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003135362E3235352E3131312E313337002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674642015.196:4240636): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=156.255.111.137 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674642034.457:4240637): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642034.458:4240638): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642034.458:4240639): pid=7670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642034.507:4240640): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=7670 suid=74 rport=45198 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642034.507:4240641): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=7670 suid=74 rport=45198 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=? res=success'
type=USER_AUTH msg=audit(1674642034.813:4240642): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=20.198.226.97 addr=20.198.226.97 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674642036.726:4240643): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674642036.768:4240644): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7670 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642036.768:4240645): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7670 suid=74 rport=45198 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642036.771:4240646): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642036.771:4240647): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642036.771:4240648): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674642036.771:4240649): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=20.198.226.97 terminal=ssh res=failed'
type=AVC msg=audit(1674642038.821:4240650): avc: denied { name_connect } for pid=6727 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642038.821:4240650): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd0b3ad3c0 a2=10 a3=7ffd0b3ad3bc items=0 ppid=5547 pid=6727 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642038.821:4240650): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674642039.431:4240651): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674642039.431:4240651): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f02355bb010 items=0 ppid=7714 pid=7717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642039.431:4240651): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674642039.461:4240652): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674642039.461:4240652): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2e86158010 items=0 ppid=7714 pid=7719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642039.461:4240652): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674642039.493:4240653): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674642039.493:4240653): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fec80556010 items=0 ppid=7714 pid=7722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642039.493:4240653): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674642039.510:4240654): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674642039.510:4240654): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7340b22010 items=0 ppid=7714 pid=7723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642039.510:4240654): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674642039.944:4240655): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674642039.944:4240655): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3661a93010 items=0 ppid=7714 pid=7736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642039.944:4240655): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003134362E342E39322E323132002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642039.952:4240656): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674642039.952:4240656): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1543dea010 items=0 ppid=7714 pid=7737 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642039.952:4240656): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003134362E342E39322E323132002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674642039.960:4240657): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674642039.960:4240657): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f78b8336010 items=0 ppid=7714 pid=7738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642039.960:4240657): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730032302E3139382E3232362E3937002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674642039.968:4240658): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674642039.968:4240658): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3b07a82010 items=0 ppid=7714 pid=7739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642039.968:4240658): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640032302E3139382E3232362E3937002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674642061.692:4240659): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642061.693:4240660): pid=7922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642061.694:4240661): pid=7922 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257577 res=1
type=USER_START msg=audit(1674642061.739:4240662): pid=7922 uid=0 auid=1055 ses=257577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642061.749:4240663): pid=7922 uid=0 auid=1055 ses=257577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642062.387:4240664): pid=7922 uid=0 auid=1055 ses=257577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642062.391:4240665): pid=7922 uid=0 auid=1055 ses=257577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674642065.055:4240666): pid=7967 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.055:4240667): pid=7967 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.055:4240668): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.082:4240669): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.086:4240670): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.086:4240671): pid=7967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.109:4240672): pid=7972 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.109:4240673): pid=7972 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.109:4240674): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.123:4240675): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.127:4240676): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.127:4240677): pid=7972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.152:4240678): pid=7978 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.152:4240679): pid=7978 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.152:4240680): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.170:4240681): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.174:4240682): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.174:4240683): pid=7978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.312:4240684): pid=7985 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.312:4240685): pid=7985 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.312:4240686): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.331:4240687): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.335:4240688): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.335:4240689): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.441:4240690): pid=7990 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.441:4240691): pid=7990 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.442:4240692): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.558:4240693): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.563:4240694): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.563:4240695): pid=7990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.609:4240696): pid=7994 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.609:4240697): pid=7994 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.610:4240698): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.633:4240699): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.637:4240700): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.637:4240701): pid=7994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.676:4240702): pid=8000 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.676:4240703): pid=8000 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.676:4240704): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.693:4240705): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.697:4240706): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.697:4240707): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.723:4240708): pid=8004 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.723:4240709): pid=8004 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.723:4240710): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.753:4240711): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.756:4240712): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.756:4240713): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.782:4240714): pid=8010 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.783:4240715): pid=8010 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.783:4240716): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.804:4240717): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.807:4240718): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.808:4240719): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.833:4240720): pid=8016 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.833:4240721): pid=8016 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.834:4240722): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.858:4240723): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.862:4240724): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.862:4240725): pid=8016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642065.887:4240726): pid=8020 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642065.887:4240727): pid=8020 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674642065.888:4240728): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642065.907:4240729): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642065.911:4240730): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642065.911:4240731): pid=8020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642068.109:4240732): pid=8044 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642068.109:4240733): pid=8044 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674642068.110:4240734): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642068.125:4240735): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642068.183:4240736): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642068.183:4240737): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642068.218:4240738): pid=8051 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642068.219:4240739): pid=8051 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674642068.219:4240740): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642068.234:4240741): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642068.321:4240742): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642068.321:4240743): pid=8051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642068.352:4240744): pid=8058 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642068.352:4240745): pid=8058 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642068.352:4240746): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642068.374:4240747): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642068.493:4240748): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642068.493:4240749): pid=8058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642068.529:4240750): pid=8064 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642068.529:4240751): pid=8064 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674642068.530:4240752): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642068.545:4240753): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642068.548:4240754): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642068.548:4240755): pid=8064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642068.573:4240756): pid=8069 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642068.574:4240757): pid=8069 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D5A69366573363773654B74676864754F2E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674642068.574:4240758): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642068.588:4240759): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642068.591:4240760): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642068.592:4240761): pid=8069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642068.616:4240762): pid=8072 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642068.617:4240763): pid=8072 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D5A69366573363773654B74676864754F2E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674642068.617:4240764): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642068.634:4240765): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642068.645:4240766): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642068.645:4240767): pid=8072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642068.669:4240768): pid=8080 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642068.670:4240769): pid=8080 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D5A69366573363773654B74676864754F2E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674642068.670:4240770): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642068.686:4240771): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642068.690:4240772): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642068.690:4240773): pid=8080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642068.717:4240774): pid=8085 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642068.718:4240775): pid=8085 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674642068.718:4240776): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642068.734:4240777): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642068.740:4240778): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642068.740:4240779): pid=8085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642073.360:4240780): pid=8127 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642073.361:4240781): pid=8127 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674642073.361:4240782): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642073.379:4240783): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642073.383:4240784): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642073.384:4240785): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642073.595:4240786): pid=8135 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642073.595:4240787): pid=8135 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674642073.595:4240788): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642073.615:4240789): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642073.623:4240790): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642073.623:4240791): pid=8135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642073.677:4240792): pid=8138 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642073.677:4240793): pid=8138 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674642073.678:4240794): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642073.698:4240795): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642073.704:4240796): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642073.704:4240797): pid=8138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642073.735:4240798): pid=8144 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642073.735:4240799): pid=8144 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674642073.736:4240800): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642073.758:4240801): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642073.764:4240802): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642073.764:4240803): pid=8144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642073.799:4240804): pid=8150 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642073.800:4240805): pid=8150 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674642073.800:4240806): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642073.817:4240807): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642073.992:4240808): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642073.992:4240809): pid=8150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642075.167:4240810): pid=8167 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642075.167:4240811): pid=8167 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674642075.167:4240812): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642075.183:4240813): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642075.285:4240814): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642075.285:4240815): pid=8167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642075.324:4240816): pid=8172 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642075.324:4240817): pid=8172 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642075.324:4240818): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642075.340:4240819): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642076.565:4240820): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642076.566:4240821): pid=8172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642076.774:4240822): pid=8194 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642076.775:4240823): pid=8194 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642076.775:4240824): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642076.793:4240825): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642078.035:4240826): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642078.036:4240827): pid=8194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642078.283:4240828): pid=8208 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642078.283:4240829): pid=8208 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642078.283:4240830): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642078.302:4240831): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642080.327:4240832): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642080.327:4240833): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642080.608:4240834): pid=8235 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642080.609:4240835): pid=8235 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642080.609:4240836): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642080.633:4240837): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642081.955:4240838): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642081.955:4240839): pid=8235 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642082.058:4240840): pid=8253 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642082.058:4240841): pid=8253 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642082.058:4240842): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642082.080:4240843): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642082.599:4240844): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642082.599:4240845): pid=8253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642082.738:4240846): pid=8266 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642082.738:4240847): pid=8266 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642082.739:4240848): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642082.761:4240849): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642085.051:4240850): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642085.052:4240851): pid=8266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642085.307:4240852): pid=8297 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642085.307:4240853): pid=8297 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642085.307:4240854): pid=8297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642085.322:4240855): pid=8297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642086.606:4240856): pid=8297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642086.607:4240857): pid=8297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642086.827:4240858): pid=8339 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642086.827:4240859): pid=8339 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642086.827:4240860): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642086.846:4240861): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674642087.499:4240862): avc: denied { name_connect } for pid=6727 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642087.499:4240862): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd0b3ad3c0 a2=10 a3=7ffd0b3ad3bc items=0 ppid=5547 pid=6727 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642087.499:4240862): proctitle="dovecot/auth"
type=USER_END msg=audit(1674642088.629:4240863): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642088.629:4240864): pid=8339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642089.495:4240865): pid=8378 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674642089.495:4240866): pid=8378 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674642089.495:4240867): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674642089.512:4240868): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674642090.839:4240869): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674642090.840:4240870): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674642094.416:4240871): avc: denied { write } for pid=8436 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674642094.416:4240871): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc8aad5650 a2=6e a3=63d102ae items=0 ppid=5547 pid=8436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642094.416:4240871): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674642094.786:4240872): avc: denied { read append } for pid=8439 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674642094.786:4240872): avc: denied { open } for pid=8439 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642094.786:4240872): arch=c000003e syscall=2 success=yes exit=8 a0=559b770b9a60 a1=402 a2=7fffc82f5ef0 a3=7fffc82f5960 items=0 ppid=5547 pid=8439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642094.786:4240872): proctitle="dovecot/imap"
type=AVC msg=audit(1674642094.786:4240873): avc: denied { getattr } for pid=8439 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642094.786:4240873): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fffc82f5e50 a2=7fffc82f5e50 a3=7fffc82f58a0 items=0 ppid=5547 pid=8439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642094.786:4240873): proctitle="dovecot/imap"
type=AVC msg=audit(1674642094.786:4240874): avc: denied { write } for pid=8439 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642094.786:4240874): arch=c000003e syscall=2 success=yes exit=10 a0=559b770be990 a1=2 a2=7fffc82f5bf0 a3=7fffc82f56a0 items=0 ppid=5547 pid=8439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642094.786:4240874): proctitle="dovecot/imap"
type=AVC msg=audit(1674642094.787:4240875): avc: denied { lock } for pid=8439 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642094.787:4240875): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffc82f5af0 a3=63d102ae items=0 ppid=5547 pid=8439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642094.787:4240875): proctitle="dovecot/imap"
type=AVC msg=audit(1674642094.787:4240876): avc: denied { read } for pid=8439 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674642094.787:4240876): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=559b770e72f8 a2=90800 a3=0 items=0 ppid=5547 pid=8439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642094.787:4240876): proctitle="dovecot/imap"
type=AVC msg=audit(1674642094.788:4240877): avc: denied { getattr } for pid=8439 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642094.788:4240877): arch=c000003e syscall=4 success=yes exit=0 a0=559b770a9a60 a1=7fffc82f5ea0 a2=7fffc82f5ea0 a3=6f632e6f72676173 items=0 ppid=5547 pid=8439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642094.788:4240877): proctitle="dovecot/imap"
type=AVC msg=audit(1674642096.017:4240878): avc: denied { write } for pid=8451 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674642096.017:4240878): arch=c000003e syscall=21 success=yes exit=0 a0=55eb4d5504c0 a1=2 a2=7b48 a3=7ffc82896160 items=0 ppid=5547 pid=8451 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642096.017:4240878): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674642121.419:4240879): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642121.420:4240880): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642121.421:4240881): pid=8667 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257578 res=1
type=USER_START msg=audit(1674642121.443:4240882): pid=8667 uid=0 auid=1055 ses=257578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642121.455:4240883): pid=8667 uid=0 auid=1055 ses=257578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642121.879:4240884): pid=8667 uid=0 auid=1055 ses=257578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642121.881:4240885): pid=8667 uid=0 auid=1055 ses=257578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674642131.228:4240886): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674642131.228:4240886): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae8686a3010 items=0 ppid=8756 pid=8762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642131.228:4240886): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232332E38322E3233332E37002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543130
type=USER_ACCT msg=audit(1674642181.908:4240887): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642181.909:4240888): pid=9165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642181.909:4240889): pid=9165 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257579 res=1
type=USER_START msg=audit(1674642181.928:4240890): pid=9165 uid=0 auid=1055 ses=257579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642181.932:4240891): pid=9165 uid=0 auid=1055 ses=257579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642182.287:4240892): pid=9165 uid=0 auid=1055 ses=257579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642182.306:4240893): pid=9165 uid=0 auid=1055 ses=257579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674642241.323:4240894): pid=9685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642241.323:4240895): pid=9685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642241.324:4240896): pid=9685 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257580 res=1
type=USER_START msg=audit(1674642241.342:4240897): pid=9685 uid=0 auid=1055 ses=257580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642241.344:4240898): pid=9685 uid=0 auid=1055 ses=257580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642241.745:4240899): pid=9685 uid=0 auid=1055 ses=257580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642241.747:4240900): pid=9685 uid=0 auid=1055 ses=257580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674642253.266:4240901): avc: denied { read } for pid=9810 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674642253.266:4240901): avc: denied { open } for pid=9810 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642253.266:4240901): arch=c000003e syscall=2 success=yes exit=18 a0=55f483f10f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=9810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642253.266:4240901): proctitle="dovecot/auth"
type=AVC msg=audit(1674642253.267:4240902): avc: denied { getattr } for pid=9810 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642253.267:4240902): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe16d60350 a2=7ffe16d60350 a3=fffffc00 items=0 ppid=5547 pid=9810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642253.267:4240902): proctitle="dovecot/auth"
type=AVC msg=audit(1674642253.925:4240903): avc: denied { name_connect } for pid=9810 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642253.925:4240903): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe16d60140 a2=10 a3=7ffe16d6013c items=0 ppid=5547 pid=9810 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642253.925:4240903): proctitle="dovecot/auth"
type=AVC msg=audit(1674642253.965:4240904): avc: denied { write } for pid=9843 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674642253.965:4240904): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffce33726b0 a2=6e a3=63d1034d items=0 ppid=5547 pid=9843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642253.965:4240904): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674642275.462:4240905): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674642275.462:4240905): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2afb02197010 items=0 ppid=10092 pid=10098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642275.462:4240905): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3137372E3235342E313731002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674642301.776:4240906): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642301.777:4240907): pid=10302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674642301.778:4240908): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642301.778:4240909): pid=10301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642301.778:4240910): pid=10302 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257581 res=1
type=LOGIN msg=audit(1674642301.778:4240911): pid=10301 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257582 res=1
type=USER_ACCT msg=audit(1674642301.779:4240912): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642301.779:4240913): pid=10303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642301.779:4240914): pid=10303 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257583 res=1
type=USER_START msg=audit(1674642301.901:4240915): pid=10301 uid=0 auid=0 ses=257582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642301.901:4240916): pid=10303 uid=0 auid=1055 ses=257583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642301.901:4240917): pid=10302 uid=0 auid=0 ses=257581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642301.902:4240918): pid=10303 uid=0 auid=1055 ses=257583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642301.904:4240919): pid=10301 uid=0 auid=0 ses=257582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642301.906:4240920): pid=10302 uid=0 auid=0 ses=257581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642302.268:4240921): pid=10301 uid=0 auid=0 ses=257582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642302.279:4240922): pid=10301 uid=0 auid=0 ses=257582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642302.496:4240923): pid=10303 uid=0 auid=1055 ses=257583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642302.498:4240924): pid=10303 uid=0 auid=1055 ses=257583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642305.543:4240925): pid=10302 uid=0 auid=0 ses=257581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642305.545:4240926): pid=10302 uid=0 auid=0 ses=257581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674642317.647:4240927): avc: denied { name_connect } for pid=9810 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642317.647:4240927): arch=c000003e syscall=42 success=no exit=-115 a0=14 a1=7ffe16d60140 a2=10 a3=7ffe16d6013c items=0 ppid=5547 pid=9810 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642317.647:4240927): proctitle="dovecot/auth"
type=AVC msg=audit(1674642317.665:4240928): avc: denied { write } for pid=9843 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674642317.665:4240928): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffce33726b0 a2=6e a3=63d1038d items=0 ppid=5547 pid=9843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642317.665:4240928): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674642361.569:4240929): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642361.569:4240930): pid=10840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642361.572:4240931): pid=10840 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257584 res=1
type=USER_START msg=audit(1674642361.595:4240932): pid=10840 uid=0 auid=1055 ses=257584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642361.598:4240933): pid=10840 uid=0 auid=1055 ses=257584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642361.978:4240934): pid=10840 uid=0 auid=1055 ses=257584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642361.981:4240935): pid=10840 uid=0 auid=1055 ses=257584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674642420.086:4240936): pid=11340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642420.086:4240937): pid=11340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642420.086:4240938): pid=11340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642420.329:4240939): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=11340 suid=74 rport=35448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.158.91.247 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642420.330:4240940): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=11340 suid=74 rport=35448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.158.91.247 terminal=? res=success'
type=USER_AUTH msg=audit(1674642421.994:4240941): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=195.158.91.247 addr=195.158.91.247 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674642422.005:4240942): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642422.006:4240943): pid=11358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642422.006:4240944): pid=11358 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257585 res=1
type=USER_START msg=audit(1674642422.022:4240945): pid=11358 uid=0 auid=1055 ses=257585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642422.023:4240946): pid=11358 uid=0 auid=1055 ses=257585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642422.307:4240947): pid=11358 uid=0 auid=1055 ses=257585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642422.309:4240948): pid=11358 uid=0 auid=1055 ses=257585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674642424.367:4240949): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.158.91.247 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674642424.657:4240950): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11340 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642424.657:4240951): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11340 suid=74 rport=35448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.158.91.247 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642424.658:4240952): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642424.658:4240953): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642424.659:4240954): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674642424.659:4240955): pid=11337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.158.91.247 terminal=ssh res=failed'
type=AVC msg=audit(1674642460.208:4240956): avc: denied { read } for pid=11711 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674642460.208:4240956): avc: denied { open } for pid=11711 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642460.208:4240956): arch=c000003e syscall=2 success=yes exit=18 a0=55bb19556f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=11711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642460.208:4240956): proctitle="dovecot/auth"
type=AVC msg=audit(1674642460.208:4240957): avc: denied { getattr } for pid=11711 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642460.208:4240957): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff64140570 a2=7fff64140570 a3=fffffc00 items=0 ppid=5547 pid=11711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642460.208:4240957): proctitle="dovecot/auth"
type=AVC msg=audit(1674642461.013:4240958): avc: denied { name_connect } for pid=11711 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642461.013:4240958): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff64140360 a2=10 a3=7fff6414035c items=0 ppid=5547 pid=11711 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642461.013:4240958): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674642462.138:4240959): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674642462.138:4240959): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab9cff74010 items=0 ppid=11725 pid=11730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642462.138:4240959): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650033362E3130332E3234302E323431002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674642481.328:4240960): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642481.328:4240961): pid=11887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642481.328:4240962): pid=11887 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257586 res=1
type=USER_START msg=audit(1674642481.347:4240963): pid=11887 uid=0 auid=1055 ses=257586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674642481.355:4240964): pid=11886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642481.355:4240965): pid=11886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642481.355:4240966): pid=11886 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257587 res=1
type=CRED_REFR msg=audit(1674642481.376:4240967): pid=11887 uid=0 auid=1055 ses=257586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642481.394:4240968): pid=11886 uid=0 auid=0 ses=257587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642481.396:4240969): pid=11886 uid=0 auid=0 ses=257587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642481.549:4240970): pid=11886 uid=0 auid=0 ses=257587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642481.553:4240971): pid=11886 uid=0 auid=0 ses=257587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642481.986:4240972): pid=11887 uid=0 auid=1055 ses=257586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642481.988:4240973): pid=11887 uid=0 auid=1055 ses=257586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674642492.356:4240974): avc: denied { write } for pid=11999 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674642492.356:4240974): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff67d034c0 a2=6e a3=63d1043c items=0 ppid=5547 pid=11999 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642492.356:4240974): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674642534.469:4240975): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642534.469:4240976): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642534.469:4240977): pid=12377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642534.541:4240978): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=12377 suid=74 rport=51584 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=154.89.5.122 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642534.541:4240979): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=12377 suid=74 rport=51584 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=154.89.5.122 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642534.703:4240980): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642534.703:4240981): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642534.703:4240982): pid=12374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12374 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674642541.024:4240983): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642541.024:4240984): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642541.026:4240985): pid=12440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257588 res=1
type=USER_START msg=audit(1674642541.053:4240986): pid=12440 uid=0 auid=1055 ses=257588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642541.055:4240987): pid=12440 uid=0 auid=1055 ses=257588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642541.470:4240988): pid=12440 uid=0 auid=1055 ses=257588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642541.472:4240989): pid=12440 uid=0 auid=1055 ses=257588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674642549.454:4240990): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12377 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642549.455:4240991): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12377 suid=74 rport=51584 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=154.89.5.122 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642549.456:4240992): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642549.456:4240993): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642549.456:4240994): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674642549.456:4240995): pid=12376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=154.89.5.122 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674642595.067:4240996): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642595.067:4240997): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642595.068:4240998): pid=12903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642596.244:4240999): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1-etm@openssh.com pfs=diffie-hellman-group-exchange-sha256 spid=12903 suid=74 rport=60042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.210.31.170 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642596.244:4241000): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1-etm@openssh.com pfs=diffie-hellman-group-exchange-sha256 spid=12903 suid=74 rport=60042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.210.31.170 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642599.297:4241001): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12903 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642599.297:4241002): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12903 suid=74 rport=60042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.210.31.170 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642599.298:4241003): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642599.298:4241004): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642599.298:4241005): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674642599.298:4241006): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=205.210.31.170 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674642601.536:4241007): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642601.536:4241008): pid=12965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642601.536:4241009): pid=12965 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257589 res=1
type=USER_ACCT msg=audit(1674642601.549:4241010): pid=12966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642601.549:4241011): pid=12966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642601.549:4241012): pid=12966 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257590 res=1
type=USER_ACCT msg=audit(1674642601.553:4241013): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642601.553:4241014): pid=12967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642601.554:4241015): pid=12967 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257591 res=1
type=USER_START msg=audit(1674642601.640:4241016): pid=12967 uid=0 auid=1055 ses=257591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642601.641:4241017): pid=12966 uid=0 auid=0 ses=257590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642601.642:4241018): pid=12965 uid=0 auid=0 ses=257589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642601.645:4241019): pid=12966 uid=0 auid=0 ses=257590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642601.646:4241020): pid=12965 uid=0 auid=0 ses=257589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642601.646:4241021): pid=12967 uid=0 auid=1055 ses=257591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642601.705:4241022): pid=12965 uid=0 auid=0 ses=257589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642601.708:4241023): pid=12965 uid=0 auid=0 ses=257589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642602.314:4241024): pid=12967 uid=0 auid=1055 ses=257591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642602.339:4241025): pid=12967 uid=0 auid=1055 ses=257591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674642603.313:4241026): avc: denied { name_connect } for pid=11711 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642603.313:4241026): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff64140360 a2=10 a3=7fff6414035c items=0 ppid=5547 pid=11711 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642603.313:4241026): proctitle="dovecot/auth"
type=AVC msg=audit(1674642603.400:4241027): avc: denied { write } for pid=13044 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674642603.400:4241027): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcdc8cabf0 a2=6e a3=63d104ab items=0 ppid=5547 pid=13044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642603.400:4241027): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674642605.469:4241028): pid=12966 uid=0 auid=0 ses=257590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642605.472:4241029): pid=12966 uid=0 auid=0 ses=257590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674642661.496:4241030): pid=13590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642661.496:4241031): pid=13590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642661.498:4241032): pid=13590 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257592 res=1
type=USER_START msg=audit(1674642661.523:4241033): pid=13590 uid=0 auid=1055 ses=257592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642661.526:4241034): pid=13590 uid=0 auid=1055 ses=257592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642662.085:4241035): pid=13590 uid=0 auid=1055 ses=257592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642662.089:4241036): pid=13590 uid=0 auid=1055 ses=257592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674642721.107:4241037): pid=14094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642721.107:4241038): pid=14094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642721.107:4241039): pid=14094 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257593 res=1
type=USER_START msg=audit(1674642721.124:4241040): pid=14094 uid=0 auid=1055 ses=257593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642721.126:4241041): pid=14094 uid=0 auid=1055 ses=257593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642721.414:4241042): pid=14094 uid=0 auid=1055 ses=257593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642721.417:4241043): pid=14094 uid=0 auid=1055 ses=257593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674642781.471:4241044): pid=14605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642781.471:4241045): pid=14605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642781.472:4241046): pid=14605 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257594 res=1
type=USER_START msg=audit(1674642781.494:4241047): pid=14605 uid=0 auid=1055 ses=257594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642781.495:4241048): pid=14605 uid=0 auid=1055 ses=257594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642781.916:4241049): pid=14605 uid=0 auid=1055 ses=257594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642781.926:4241050): pid=14605 uid=0 auid=1055 ses=257594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674642796.391:4241051): avc: denied { read } for pid=14727 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674642796.391:4241051): avc: denied { open } for pid=14727 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642796.391:4241051): arch=c000003e syscall=2 success=yes exit=18 a0=55ec76405f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=14727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642796.391:4241051): proctitle="dovecot/auth"
type=AVC msg=audit(1674642796.391:4241052): avc: denied { getattr } for pid=14727 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642796.391:4241052): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc79c81430 a2=7ffc79c81430 a3=fffffc00 items=0 ppid=5547 pid=14727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642796.391:4241052): proctitle="dovecot/auth"
type=AVC msg=audit(1674642801.090:4241053): avc: denied { name_connect } for pid=14727 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642801.090:4241053): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc79c81220 a2=10 a3=7ffc79c8121c items=0 ppid=5547 pid=14727 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642801.090:4241053): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674642802.217:4241054): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674642802.217:4241054): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b10033e0010 items=0 ppid=14770 pid=14776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642802.217:4241054): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132332E3138312E3234352E3634002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674642814.931:4241055): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674642814.931:4241055): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af477cc8010 items=0 ppid=14897 pid=14904 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642814.931:4241055): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131392E36322E3138342E313337002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674642825.355:4241056): pid=14987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642825.355:4241057): pid=14987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642825.355:4241058): pid=14987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642825.581:4241059): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=14987 suid=74 rport=63512 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=221.154.147.86 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674642825.581:4241060): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=14987 suid=74 rport=63512 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=221.154.147.86 terminal=? res=success'
type=USER_AUTH msg=audit(1674642826.997:4241061): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=221.154.147.86 addr=221.154.147.86 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674642829.636:4241062): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.154.147.86 terminal=ssh res=failed'
type=AVC msg=audit(1674642830.702:4241063): avc: denied { name_connect } for pid=14727 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642830.702:4241063): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc79c81220 a2=10 a3=7ffc79c8121c items=0 ppid=5547 pid=14727 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642830.702:4241063): proctitle="dovecot/auth"
type=AVC msg=audit(1674642830.739:4241064): avc: denied { write } for pid=15034 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674642830.739:4241064): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffed87d22e0 a2=6e a3=63d1058e items=0 ppid=5547 pid=15034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642830.739:4241064): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674642830.823:4241065): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14987 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642830.823:4241066): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14987 suid=74 rport=63512 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=221.154.147.86 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642830.825:4241067): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642830.825:4241068): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674642830.825:4241069): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674642830.825:4241070): pid=14977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.154.147.86 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674642841.953:4241071): pid=15140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642841.954:4241072): pid=15140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642841.954:4241073): pid=15140 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257595 res=1
type=USER_START msg=audit(1674642841.981:4241074): pid=15140 uid=0 auid=1055 ses=257595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642841.992:4241075): pid=15140 uid=0 auid=1055 ses=257595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642842.444:4241076): pid=15140 uid=0 auid=1055 ses=257595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642842.453:4241077): pid=15140 uid=0 auid=1055 ses=257595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674642901.479:4241078): pid=15635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642901.480:4241079): pid=15635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642901.480:4241080): pid=15635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257596 res=1
type=USER_ACCT msg=audit(1674642901.482:4241081): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642901.482:4241082): pid=15633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642901.482:4241083): pid=15633 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257597 res=1
type=USER_ACCT msg=audit(1674642901.483:4241084): pid=15632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642901.483:4241085): pid=15632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642901.483:4241086): pid=15632 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257598 res=1
type=USER_ACCT msg=audit(1674642901.497:4241087): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642901.497:4241088): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642901.498:4241089): pid=15634 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257599 res=1
type=USER_START msg=audit(1674642901.528:4241090): pid=15635 uid=0 auid=1055 ses=257596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642901.531:4241091): pid=15635 uid=0 auid=1055 ses=257596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642901.541:4241092): pid=15632 uid=0 auid=0 ses=257598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642901.541:4241093): pid=15633 uid=0 auid=0 ses=257597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674642901.542:4241094): pid=15634 uid=0 auid=0 ses=257599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642901.544:4241095): pid=15633 uid=0 auid=0 ses=257597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642901.544:4241096): pid=15634 uid=0 auid=0 ses=257599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642901.545:4241097): pid=15632 uid=0 auid=0 ses=257598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642901.689:4241098): pid=15633 uid=0 auid=0 ses=257597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642901.716:4241099): pid=15633 uid=0 auid=0 ses=257597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642901.722:4241100): pid=15634 uid=0 auid=0 ses=257599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642901.731:4241101): pid=15634 uid=0 auid=0 ses=257599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642902.053:4241102): pid=15635 uid=0 auid=1055 ses=257596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642902.057:4241103): pid=15635 uid=0 auid=1055 ses=257596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642904.994:4241104): pid=15632 uid=0 auid=0 ses=257598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642904.996:4241105): pid=15632 uid=0 auid=0 ses=257598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674642915.619:4241106): avc: denied { read } for pid=15784 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674642915.619:4241106): avc: denied { open } for pid=15784 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642915.619:4241106): arch=c000003e syscall=2 success=yes exit=18 a0=5613ec4b8f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=15784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642915.619:4241106): proctitle="dovecot/auth"
type=AVC msg=audit(1674642915.619:4241107): avc: denied { getattr } for pid=15784 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674642915.619:4241107): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc6bb0d9a0 a2=7ffc6bb0d9a0 a3=fffffc00 items=0 ppid=5547 pid=15784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642915.619:4241107): proctitle="dovecot/auth"
type=AVC msg=audit(1674642916.251:4241108): avc: denied { name_connect } for pid=15784 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674642916.251:4241108): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc6bb0d790 a2=10 a3=7ffc6bb0d78c items=0 ppid=5547 pid=15784 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642916.251:4241108): proctitle="dovecot/auth"
type=AVC msg=audit(1674642916.288:4241109): avc: denied { write } for pid=15819 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674642916.288:4241109): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffebec40180 a2=6e a3=63d105e4 items=0 ppid=5547 pid=15819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674642916.288:4241109): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674642962.039:4241110): pid=16267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674642962.040:4241111): pid=16267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674642962.040:4241112): pid=16267 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257600 res=1
type=USER_START msg=audit(1674642962.066:4241113): pid=16267 uid=0 auid=1055 ses=257600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674642962.073:4241114): pid=16267 uid=0 auid=1055 ses=257600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674642962.408:4241115): pid=16267 uid=0 auid=1055 ses=257600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674642962.410:4241116): pid=16267 uid=0 auid=1055 ses=257600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643021.427:4241117): pid=16763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643021.427:4241118): pid=16763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643021.427:4241119): pid=16763 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257601 res=1
type=USER_START msg=audit(1674643021.476:4241120): pid=16763 uid=0 auid=1055 ses=257601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643021.477:4241121): pid=16763 uid=0 auid=1055 ses=257601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643021.872:4241122): pid=16763 uid=0 auid=1055 ses=257601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643021.874:4241123): pid=16763 uid=0 auid=1055 ses=257601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643081.895:4241124): pid=17244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643081.896:4241125): pid=17244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643081.896:4241126): pid=17244 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257602 res=1
type=USER_START msg=audit(1674643081.917:4241127): pid=17244 uid=0 auid=1055 ses=257602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643081.920:4241128): pid=17244 uid=0 auid=1055 ses=257602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643082.304:4241129): pid=17244 uid=0 auid=1055 ses=257602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643082.306:4241130): pid=17244 uid=0 auid=1055 ses=257602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674643096.686:4241131): avc: denied { read } for pid=17369 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674643096.686:4241131): avc: denied { open } for pid=17369 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643096.686:4241131): arch=c000003e syscall=2 success=yes exit=18 a0=5568cade7f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643096.686:4241131): proctitle="dovecot/auth"
type=AVC msg=audit(1674643096.686:4241132): avc: denied { getattr } for pid=17369 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643096.686:4241132): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe3055faf0 a2=7ffe3055faf0 a3=fffffc00 items=0 ppid=5547 pid=17369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643096.686:4241132): proctitle="dovecot/auth"
type=AVC msg=audit(1674643098.936:4241133): avc: denied { name_connect } for pid=17369 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674643098.936:4241133): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe3055f8e0 a2=10 a3=7ffe3055f8dc items=0 ppid=5547 pid=17369 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643098.936:4241133): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674643100.044:4241134): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674643100.044:4241134): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad9091a0010 items=0 ppid=17396 pid=17401 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643100.044:4241134): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3134322E31362E313035002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674643101.288:4241135): avc: denied { write } for pid=17414 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674643101.288:4241135): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffe6ed88c0 a2=6e a3=63d1069d items=0 ppid=5547 pid=17414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643101.288:4241135): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674643101.864:4241136): avc: denied { read append } for pid=17423 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674643101.864:4241136): avc: denied { open } for pid=17423 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643101.864:4241136): arch=c000003e syscall=2 success=yes exit=8 a0=5643fe2b3a60 a1=402 a2=7fffd0221e20 a3=7fffd02218a0 items=0 ppid=5547 pid=17423 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643101.864:4241136): proctitle="dovecot/imap"
type=AVC msg=audit(1674643101.864:4241137): avc: denied { getattr } for pid=17423 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643101.864:4241137): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fffd0221d80 a2=7fffd0221d80 a3=7fffd02217e0 items=0 ppid=5547 pid=17423 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643101.864:4241137): proctitle="dovecot/imap"
type=AVC msg=audit(1674643101.864:4241138): avc: denied { write } for pid=17423 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643101.864:4241138): arch=c000003e syscall=2 success=yes exit=10 a0=5643fe2b8960 a1=2 a2=7fffd0221b20 a3=7fffd02215e0 items=0 ppid=5547 pid=17423 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643101.864:4241138): proctitle="dovecot/imap"
type=AVC msg=audit(1674643101.865:4241139): avc: denied { lock } for pid=17423 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643101.865:4241139): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffd0221a20 a3=63d1069d items=0 ppid=5547 pid=17423 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643101.865:4241139): proctitle="dovecot/imap"
type=AVC msg=audit(1674643101.865:4241140): avc: denied { read } for pid=17423 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674643101.865:4241140): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5643fe2e1300 a2=90800 a3=0 items=0 ppid=5547 pid=17423 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643101.865:4241140): proctitle="dovecot/imap"
type=AVC msg=audit(1674643101.866:4241141): avc: denied { getattr } for pid=17423 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643101.866:4241141): arch=c000003e syscall=4 success=yes exit=0 a0=5643fe2a3a60 a1=7fffd0221dd0 a2=7fffd0221dd0 a3=6f632e6f72676173 items=0 ppid=5547 pid=17423 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643101.866:4241141): proctitle="dovecot/imap"
type=AVC msg=audit(1674643103.241:4241142): avc: denied { write } for pid=17439 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674643103.241:4241142): arch=c000003e syscall=21 success=yes exit=0 a0=56111ca7b4c0 a1=2 a2=7b48 a3=7ffd629055e0 items=0 ppid=5547 pid=17439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643103.241:4241142): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674643141.323:4241143): pid=17763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643141.324:4241144): pid=17763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643141.325:4241145): pid=17763 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257603 res=1
type=USER_ACCT msg=audit(1674643141.332:4241146): pid=17764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643141.332:4241147): pid=17764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643141.332:4241148): pid=17764 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257604 res=1
type=USER_START msg=audit(1674643141.373:4241149): pid=17764 uid=0 auid=1055 ses=257604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674643141.374:4241150): pid=17763 uid=0 auid=0 ses=257603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643141.375:4241151): pid=17764 uid=0 auid=1055 ses=257604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643141.377:4241152): pid=17763 uid=0 auid=0 ses=257603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643141.712:4241153): pid=17764 uid=0 auid=1055 ses=257604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643141.728:4241154): pid=17764 uid=0 auid=1055 ses=257604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643143.152:4241155): pid=17763 uid=0 auid=0 ses=257603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643143.157:4241156): pid=17763 uid=0 auid=0 ses=257603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643201.173:4241157): pid=18248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643201.173:4241158): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643201.173:4241159): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643201.173:4241160): pid=18249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643201.173:4241161): pid=18248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643201.173:4241162): pid=18250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643201.174:4241163): pid=18249 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257605 res=1
type=LOGIN msg=audit(1674643201.174:4241164): pid=18248 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257606 res=1
type=LOGIN msg=audit(1674643201.174:4241165): pid=18250 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257607 res=1
type=USER_START msg=audit(1674643201.205:4241166): pid=18249 uid=0 auid=0 ses=257605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674643201.206:4241167): pid=18248 uid=0 auid=0 ses=257606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674643201.206:4241168): pid=18250 uid=0 auid=1055 ses=257607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643201.207:4241169): pid=18248 uid=0 auid=0 ses=257606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643201.207:4241170): pid=18249 uid=0 auid=0 ses=257605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643201.207:4241171): pid=18250 uid=0 auid=1055 ses=257607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643201.239:4241172): pid=18248 uid=0 auid=0 ses=257606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643201.242:4241173): pid=18248 uid=0 auid=0 ses=257606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643201.546:4241174): pid=18250 uid=0 auid=1055 ses=257607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643201.549:4241175): pid=18250 uid=0 auid=1055 ses=257607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643204.553:4241176): pid=18249 uid=0 auid=0 ses=257605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643204.555:4241177): pid=18249 uid=0 auid=0 ses=257605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674643235.722:4241178): avc: denied { read } for pid=18522 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674643235.722:4241178): avc: denied { open } for pid=18522 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643235.722:4241178): arch=c000003e syscall=2 success=yes exit=18 a0=5620c7b81f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=18522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643235.722:4241178): proctitle="dovecot/auth"
type=AVC msg=audit(1674643235.722:4241179): avc: denied { getattr } for pid=18522 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643235.722:4241179): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc41fe8e80 a2=7ffc41fe8e80 a3=fffffc00 items=0 ppid=5547 pid=18522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643235.722:4241179): proctitle="dovecot/auth"
type=AVC msg=audit(1674643236.405:4241180): avc: denied { name_connect } for pid=18522 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674643236.405:4241180): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc41fe8c70 a2=10 a3=7ffc41fe8c6c items=0 ppid=5547 pid=18522 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643236.405:4241180): proctitle="dovecot/auth"
type=AVC msg=audit(1674643236.440:4241181): avc: denied { write } for pid=18556 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674643236.440:4241181): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff4f0e0410 a2=6e a3=63d10724 items=0 ppid=5547 pid=18556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643236.440:4241181): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674643238.757:4241182): avc: denied { write } for pid=18556 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674643238.757:4241182): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff4f0e0410 a2=6e a3=63d10726 items=0 ppid=5547 pid=18556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643238.757:4241182): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674643261.590:4241183): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643261.590:4241184): pid=18768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643261.592:4241185): pid=18768 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257608 res=1
type=USER_START msg=audit(1674643261.615:4241186): pid=18768 uid=0 auid=1055 ses=257608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643261.631:4241187): pid=18768 uid=0 auid=1055 ses=257608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643262.032:4241188): pid=18768 uid=0 auid=1055 ses=257608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643262.036:4241189): pid=18768 uid=0 auid=1055 ses=257608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674643269.010:4241190): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643269.010:4241191): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643269.010:4241192): pid=18826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18826 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643269.226:4241193): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=18826 suid=74 rport=53596 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.116.144.39 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643269.227:4241194): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=18826 suid=74 rport=53596 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.116.144.39 terminal=? res=success'
type=USER_AUTH msg=audit(1674643269.731:4241195): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=137.116.144.39 addr=137.116.144.39 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674643271.520:4241196): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.116.144.39 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643271.821:4241197): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18826 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643271.821:4241198): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18826 suid=74 rport=53596 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.116.144.39 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643271.823:4241199): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643271.823:4241200): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643271.823:4241201): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674643271.823:4241202): pid=18815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.116.144.39 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674643321.059:4241203): pid=19143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643321.059:4241204): pid=19143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643321.061:4241205): pid=19143 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257609 res=1
type=USER_START msg=audit(1674643321.082:4241206): pid=19143 uid=0 auid=1055 ses=257609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643321.085:4241207): pid=19143 uid=0 auid=1055 ses=257609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643321.385:4241208): pid=19143 uid=0 auid=1055 ses=257609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643321.388:4241209): pid=19143 uid=0 auid=1055 ses=257609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643381.418:4241210): pid=19528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643381.419:4241211): pid=19528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643381.419:4241212): pid=19528 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257610 res=1
type=USER_ACCT msg=audit(1674643381.422:4241213): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643381.423:4241214): pid=19529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643381.423:4241215): pid=19529 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257611 res=1
type=USER_START msg=audit(1674643381.462:4241216): pid=19529 uid=0 auid=1055 ses=257611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674643381.463:4241217): pid=19528 uid=0 auid=0 ses=257610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643381.463:4241218): pid=19529 uid=0 auid=1055 ses=257611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643381.471:4241219): pid=19528 uid=0 auid=0 ses=257610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643381.538:4241220): pid=19528 uid=0 auid=0 ses=257610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643381.541:4241221): pid=19528 uid=0 auid=0 ses=257610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643381.807:4241222): pid=19529 uid=0 auid=1055 ses=257611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643381.809:4241223): pid=19529 uid=0 auid=1055 ses=257611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643441.822:4241224): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643441.822:4241225): pid=19910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643441.822:4241226): pid=19910 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257612 res=1
type=USER_START msg=audit(1674643441.838:4241227): pid=19910 uid=0 auid=1055 ses=257612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643441.841:4241228): pid=19910 uid=0 auid=1055 ses=257612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643442.128:4241229): pid=19910 uid=0 auid=1055 ses=257612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643442.130:4241230): pid=19910 uid=0 auid=1055 ses=257612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674643466.566:4241231): pid=20084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643466.566:4241232): pid=20084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643466.566:4241233): pid=20084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20084 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643466.710:4241234): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=20084 suid=74 rport=38013 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643466.710:4241235): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=20084 suid=74 rport=38013 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=USER_AUTH msg=audit(1674643468.962:4241236): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674643471.405:4241237): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643471.708:4241238): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20084 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643471.708:4241239): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20084 suid=74 rport=38013 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643471.709:4241240): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643471.709:4241241): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643471.709:4241242): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20070 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674643471.710:4241243): pid=20070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=AVC msg=audit(1674643487.626:4241244): avc: denied { read } for pid=20203 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674643487.626:4241244): avc: denied { open } for pid=20203 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643487.626:4241244): arch=c000003e syscall=2 success=yes exit=18 a0=558580987f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643487.626:4241244): proctitle="dovecot/auth"
type=AVC msg=audit(1674643487.626:4241245): avc: denied { getattr } for pid=20203 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643487.626:4241245): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe4e838ee0 a2=7ffe4e838ee0 a3=fffffc00 items=0 ppid=5547 pid=20203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643487.626:4241245): proctitle="dovecot/auth"
type=AVC msg=audit(1674643488.990:4241246): avc: denied { name_connect } for pid=20203 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674643488.990:4241246): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe4e838cd0 a2=10 a3=7ffe4e838ccc items=0 ppid=5547 pid=20203 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643488.990:4241246): proctitle="dovecot/auth"
type=AVC msg=audit(1674643489.033:4241247): avc: denied { write } for pid=20212 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674643489.033:4241247): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffde78159e0 a2=6e a3=63d10821 items=0 ppid=5547 pid=20212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643489.033:4241247): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674643501.155:4241248): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643501.155:4241249): pid=20292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643501.155:4241250): pid=20291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643501.155:4241251): pid=20292 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643501.156:4241252): pid=20291 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257613 res=1
type=LOGIN msg=audit(1674643501.156:4241253): pid=20292 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257614 res=1
type=USER_START msg=audit(1674643501.208:4241254): pid=20292 uid=0 auid=1055 ses=257614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643501.210:4241255): pid=20292 uid=0 auid=1055 ses=257614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674643501.211:4241256): pid=20291 uid=0 auid=0 ses=257613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643501.219:4241257): pid=20291 uid=0 auid=0 ses=257613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643501.597:4241258): pid=20292 uid=0 auid=1055 ses=257614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643501.602:4241259): pid=20292 uid=0 auid=1055 ses=257614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643504.609:4241260): pid=20291 uid=0 auid=0 ses=257613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643504.613:4241261): pid=20291 uid=0 auid=0 ses=257613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674643541.009:4241262): avc: denied { name_connect } for pid=20203 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674643541.009:4241262): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe4e838cd0 a2=10 a3=7ffe4e838ccc items=0 ppid=5547 pid=20203 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643541.009:4241262): proctitle="dovecot/auth"
type=AVC msg=audit(1674643541.026:4241263): avc: denied { write } for pid=20212 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674643541.026:4241263): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffde78159e0 a2=6e a3=63d10855 items=0 ppid=5547 pid=20212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643541.026:4241263): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674643561.637:4241264): pid=20772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643561.638:4241265): pid=20772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643561.639:4241266): pid=20772 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257615 res=1
type=USER_START msg=audit(1674643561.668:4241267): pid=20772 uid=0 auid=1055 ses=257615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643561.670:4241268): pid=20772 uid=0 auid=1055 ses=257615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643562.038:4241269): pid=20772 uid=0 auid=1055 ses=257615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643562.041:4241270): pid=20772 uid=0 auid=1055 ses=257615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643621.066:4241271): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643621.066:4241272): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643621.066:4241273): pid=21131 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257616 res=1
type=USER_START msg=audit(1674643621.080:4241274): pid=21131 uid=0 auid=1055 ses=257616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643621.082:4241275): pid=21131 uid=0 auid=1055 ses=257616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643621.478:4241276): pid=21131 uid=0 auid=1055 ses=257616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643621.496:4241277): pid=21131 uid=0 auid=1055 ses=257616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674643647.318:4241278): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674643647.318:4241278): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b8073763010 items=0 ppid=21307 pid=21314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643647.318:4241278): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E322E32342E323236002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431303A
type=CRYPTO_KEY_USER msg=audit(1674643649.881:4241279): pid=21334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643649.881:4241280): pid=21334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643649.882:4241281): pid=21334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21334 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643650.106:4241282): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=21334 suid=74 rport=44234 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643650.106:4241283): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=21334 suid=74 rport=44234 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=AVC msg=audit(1674643651.919:4241284): avc: denied { write } for pid=21347 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674643651.919:4241284): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff06cd7c50 a2=6e a3=63d108c3 items=0 ppid=5547 pid=21347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643651.919:4241284): proctitle=646F7665636F742F61757468002D77
type=USER_AUTH msg=audit(1674643651.978:4241285): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674643653.875:4241286): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643655.212:4241287): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21334 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643655.212:4241288): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21334 suid=74 rport=44234 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643655.213:4241289): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643655.213:4241290): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643655.213:4241291): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674643655.213:4241292): pid=21330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674643656.170:4241293): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674643656.170:4241293): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5a7b8a9010 items=0 ppid=21377 pid=21382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643656.170:4241293): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034392E39312E3234332E3230002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543130
type=AVC msg=audit(1674643665.338:4241294): avc: denied { name_connect } for pid=20203 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674643665.338:4241294): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe4e838cd0 a2=10 a3=7ffe4e838ccc items=0 ppid=5547 pid=20203 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643665.338:4241294): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674643666.455:4241295): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674643666.455:4241295): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b52566a6010 items=0 ppid=21442 pid=21449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643666.455:4241295): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232332E38342E3136312E313937002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674643681.512:4241296): pid=21554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643681.512:4241297): pid=21554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643681.513:4241298): pid=21554 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257617 res=1
type=USER_START msg=audit(1674643681.530:4241299): pid=21554 uid=0 auid=1055 ses=257617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643681.533:4241300): pid=21554 uid=0 auid=1055 ses=257617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643681.881:4241301): pid=21554 uid=0 auid=1055 ses=257617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643681.883:4241302): pid=21554 uid=0 auid=1055 ses=257617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674643741.902:4241303): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643741.902:4241304): pid=21949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643741.903:4241305): pid=21949 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257618 res=1
type=USER_START msg=audit(1674643741.929:4241306): pid=21949 uid=0 auid=1055 ses=257618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643741.938:4241307): pid=21949 uid=0 auid=1055 ses=257618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643742.286:4241308): pid=21949 uid=0 auid=1055 ses=257618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643742.289:4241309): pid=21949 uid=0 auid=1055 ses=257618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674643762.017:4241310): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643762.017:4241311): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643762.018:4241312): pid=22074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22074 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643762.160:4241313): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22074 suid=74 rport=49094 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643762.160:4241314): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22074 suid=74 rport=49094 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=USER_AUTH msg=audit(1674643762.845:4241315): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=141.94.106.15 addr=141.94.106.15 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674643764.647:4241316): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643764.794:4241317): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22074 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643764.794:4241318): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22074 suid=74 rport=49094 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643764.797:4241319): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643764.797:4241320): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643764.797:4241321): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22073 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674643764.797:4241322): pid=22073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674643801.329:4241323): pid=22326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643801.329:4241324): pid=22326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643801.329:4241325): pid=22326 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257619 res=1
type=USER_ACCT msg=audit(1674643801.338:4241326): pid=22325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643801.338:4241327): pid=22325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643801.338:4241328): pid=22325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257620 res=1
type=USER_ACCT msg=audit(1674643801.344:4241329): pid=22323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643801.345:4241330): pid=22323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643801.345:4241331): pid=22323 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257621 res=1
type=USER_ACCT msg=audit(1674643801.347:4241332): pid=22324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643801.347:4241333): pid=22324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643801.348:4241334): pid=22324 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257622 res=1
type=USER_START msg=audit(1674643801.426:4241335): pid=22326 uid=0 auid=1055 ses=257619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643801.426:4241336): pid=22326 uid=0 auid=1055 ses=257619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674643801.470:4241337): pid=22323 uid=0 auid=0 ses=257621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674643801.471:4241338): pid=22325 uid=0 auid=0 ses=257620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674643801.471:4241339): pid=22324 uid=0 auid=0 ses=257622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643801.472:4241340): pid=22323 uid=0 auid=0 ses=257621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643801.472:4241341): pid=22324 uid=0 auid=0 ses=257622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643801.473:4241342): pid=22325 uid=0 auid=0 ses=257620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643801.509:4241343): pid=22323 uid=0 auid=0 ses=257621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643801.513:4241344): pid=22323 uid=0 auid=0 ses=257621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643801.621:4241345): pid=22325 uid=0 auid=0 ses=257620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643801.676:4241346): pid=22325 uid=0 auid=0 ses=257620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643802.288:4241347): pid=22326 uid=0 auid=1055 ses=257619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643802.297:4241348): pid=22326 uid=0 auid=1055 ses=257619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643805.258:4241349): pid=22324 uid=0 auid=0 ses=257622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643805.259:4241350): pid=22324 uid=0 auid=0 ses=257622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674643806.594:4241351): pid=22384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643806.594:4241352): pid=22384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643806.594:4241353): pid=22384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643806.768:4241354): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22384 suid=74 rport=53128 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643806.768:4241355): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22384 suid=74 rport=53128 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=USER_AUTH msg=audit(1674643807.563:4241356): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=146.59.127.25 addr=146.59.127.25 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674643809.208:4241357): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643809.754:4241358): pid=22410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643809.754:4241359): pid=22410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643809.754:4241360): pid=22410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643809.902:4241361): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22410 suid=74 rport=35440 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643809.902:4241362): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22410 suid=74 rport=35440 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643810.210:4241363): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22384 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643810.210:4241364): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22384 suid=74 rport=53128 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643810.214:4241365): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643810.214:4241366): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643810.214:4241367): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674643810.214:4241368): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674643810.595:4241369): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=87.153.80.30 addr=87.153.80.30 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674643812.987:4241370): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643813.139:4241371): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22410 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643813.139:4241372): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22410 suid=74 rport=35440 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643813.141:4241373): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643813.141:4241374): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643813.141:4241375): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674643813.141:4241376): pid=22409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674643861.284:4241377): pid=22748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643861.284:4241378): pid=22748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643861.286:4241379): pid=22748 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257623 res=1
type=USER_START msg=audit(1674643861.343:4241380): pid=22748 uid=0 auid=1055 ses=257623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643861.345:4241381): pid=22748 uid=0 auid=1055 ses=257623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643861.806:4241382): pid=22748 uid=0 auid=1055 ses=257623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643861.810:4241383): pid=22748 uid=0 auid=1055 ses=257623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674643871.302:4241384): pid=22815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643871.302:4241385): pid=22815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643871.303:4241386): pid=22815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22815 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643871.539:4241387): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22815 suid=74 rport=51504 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643871.539:4241388): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22815 suid=74 rport=51504 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=USER_AUTH msg=audit(1674643872.598:4241389): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=46.101.38.229 addr=46.101.38.229 terminal=ssh res=failed'
type=AVC msg=audit(1674643874.079:4241390): avc: denied { read } for pid=22830 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674643874.079:4241390): avc: denied { open } for pid=22830 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643874.079:4241390): arch=c000003e syscall=2 success=yes exit=18 a0=562f3186af70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643874.079:4241390): proctitle="dovecot/auth"
type=AVC msg=audit(1674643874.079:4241391): avc: denied { getattr } for pid=22830 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643874.079:4241391): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdbcdaffd0 a2=7ffdbcdaffd0 a3=fffffc00 items=0 ppid=5547 pid=22830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643874.079:4241391): proctitle="dovecot/auth"
type=USER_AUTH msg=audit(1674643874.167:4241392): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643874.408:4241393): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22815 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643874.408:4241394): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22815 suid=74 rport=51504 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643874.409:4241395): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643874.409:4241396): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643874.409:4241397): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674643874.409:4241398): pid=22814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=ssh res=failed'
type=AVC msg=audit(1674643876.532:4241399): avc: denied { name_connect } for pid=22830 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674643876.532:4241399): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdbcdafdc0 a2=10 a3=7ffdbcdafdbc items=0 ppid=5547 pid=22830 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643876.532:4241399): proctitle="dovecot/auth"
type=AVC msg=audit(1674643876.570:4241400): avc: denied { write } for pid=22846 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674643876.570:4241400): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd1c396640 a2=6e a3=63d109a4 items=0 ppid=5547 pid=22846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643876.570:4241400): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674643877.394:4241401): avc: denied { read append } for pid=22855 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674643877.394:4241401): avc: denied { open } for pid=22855 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643877.394:4241401): arch=c000003e syscall=2 success=yes exit=8 a0=5608f818aa60 a1=402 a2=7fff7bd92bd0 a3=7fff7bd92660 items=0 ppid=5547 pid=22855 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643877.394:4241401): proctitle="dovecot/imap"
type=AVC msg=audit(1674643877.395:4241402): avc: denied { getattr } for pid=22855 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643877.395:4241402): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff7bd92b30 a2=7fff7bd92b30 a3=7fff7bd925a0 items=0 ppid=5547 pid=22855 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643877.395:4241402): proctitle="dovecot/imap"
type=AVC msg=audit(1674643877.395:4241403): avc: denied { write } for pid=22855 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643877.395:4241403): arch=c000003e syscall=2 success=yes exit=10 a0=5608f818f960 a1=2 a2=7fff7bd928d0 a3=7fff7bd92360 items=0 ppid=5547 pid=22855 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643877.395:4241403): proctitle="dovecot/imap"
type=AVC msg=audit(1674643877.395:4241404): avc: denied { lock } for pid=22855 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643877.395:4241404): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff7bd927d0 a3=63d109a5 items=0 ppid=5547 pid=22855 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643877.395:4241404): proctitle="dovecot/imap"
type=AVC msg=audit(1674643877.395:4241405): avc: denied { read } for pid=22855 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674643877.395:4241405): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5608f81b8300 a2=90800 a3=0 items=0 ppid=5547 pid=22855 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643877.395:4241405): proctitle="dovecot/imap"
type=AVC msg=audit(1674643877.396:4241406): avc: denied { getattr } for pid=22855 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674643877.396:4241406): arch=c000003e syscall=4 success=yes exit=0 a0=5608f817aa60 a1=7fff7bd92b80 a2=7fff7bd92b80 a3=6f632e6f72676173 items=0 ppid=5547 pid=22855 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643877.396:4241406): proctitle="dovecot/imap"
type=AVC msg=audit(1674643878.778:4241407): avc: denied { write } for pid=22924 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674643878.778:4241407): arch=c000003e syscall=21 success=yes exit=0 a0=56351e6674c0 a1=2 a2=7b48 a3=7fffe3625a20 items=0 ppid=5547 pid=22924 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643878.778:4241407): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674643921.843:4241408): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643921.844:4241409): pid=23242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643921.845:4241410): pid=23242 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257624 res=1
type=USER_START msg=audit(1674643921.869:4241411): pid=23242 uid=0 auid=1055 ses=257624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643921.873:4241412): pid=23242 uid=0 auid=1055 ses=257624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643922.227:4241413): pid=23242 uid=0 auid=1055 ses=257624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643922.237:4241414): pid=23242 uid=0 auid=1055 ses=257624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674643945.063:4241415): avc: denied { name_connect } for pid=22830 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674643945.063:4241415): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdbcdafdc0 a2=10 a3=7ffdbcdafdbc items=0 ppid=5547 pid=22830 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643945.063:4241415): proctitle="dovecot/auth"
type=AVC msg=audit(1674643958.165:4241416): avc: denied { write } for pid=23384 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674643958.165:4241416): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcb0bb8ba0 a2=6e a3=63d109f6 items=0 ppid=5547 pid=23384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643958.165:4241416): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674643981.254:4241417): pid=23627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674643981.254:4241418): pid=23627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674643981.254:4241419): pid=23627 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257625 res=1
type=USER_START msg=audit(1674643981.273:4241420): pid=23627 uid=0 auid=1055 ses=257625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674643981.274:4241421): pid=23627 uid=0 auid=1055 ses=257625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674643981.623:4241422): pid=23627 uid=0 auid=1055 ses=257625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674643981.626:4241423): pid=23627 uid=0 auid=1055 ses=257625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674643984.004:4241424): pid=23653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643984.005:4241425): pid=23653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643984.005:4241426): pid=23653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23653 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643984.335:4241427): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23653 suid=74 rport=39062 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674643984.335:4241428): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23653 suid=74 rport=39062 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=USER_AUTH msg=audit(1674643985.773:4241429): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=187.103.67.186 addr=187.103.67.186 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643987.329:4241430): pid=23676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643987.329:4241431): pid=23676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643987.329:4241432): pid=23676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674643987.524:4241433): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674643987.860:4241434): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23653 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643987.860:4241435): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23653 suid=74 rport=39062 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643987.862:4241436): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643987.862:4241437): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674643987.862:4241438): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23652 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674643987.862:4241439): pid=23652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=ssh res=failed'
type=AVC msg=audit(1674643994.083:4241440): avc: denied { name_connect } for pid=22830 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674643994.083:4241440): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdbcdafdc0 a2=10 a3=7ffdbcdafdbc items=0 ppid=5547 pid=22830 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674643994.083:4241440): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674644030.038:4241441): pid=23974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644030.039:4241442): pid=23974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644030.039:4241443): pid=23974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644030.274:4241444): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23974 suid=74 rport=56674 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644030.274:4241445): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23974 suid=74 rport=56674 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=USER_AUTH msg=audit(1674644031.283:4241446): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=195.182.38.200 addr=195.182.38.200 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644033.350:4241447): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644033.584:4241448): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23974 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644033.584:4241449): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23974 suid=74 rport=56674 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644033.586:4241450): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644033.586:4241451): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644033.586:4241452): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644033.586:4241453): pid=23973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644041.662:4241454): pid=24040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644041.663:4241455): pid=24040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644041.663:4241456): pid=24040 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257626 res=1
type=USER_START msg=audit(1674644041.683:4241457): pid=24040 uid=0 auid=1055 ses=257626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644041.687:4241458): pid=24040 uid=0 auid=1055 ses=257626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644042.073:4241459): pid=24040 uid=0 auid=1055 ses=257626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644042.081:4241460): pid=24040 uid=0 auid=1055 ses=257626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644057.444:4241461): pid=24138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644057.444:4241462): pid=24138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644057.444:4241463): pid=24138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24138 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644057.591:4241464): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24138 suid=74 rport=46202 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644057.591:4241465): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24138 suid=74 rport=46202 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=USER_AUTH msg=audit(1674644058.291:4241466): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=87.153.80.30 addr=87.153.80.30 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644060.061:4241467): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644060.211:4241468): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24138 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644060.211:4241469): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24138 suid=74 rport=46202 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644060.213:4241470): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644060.213:4241471): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644060.213:4241472): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24137 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644060.213:4241473): pid=24137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=ssh res=failed'
type=AVC msg=audit(1674644086.856:4241474): avc: denied { read } for pid=24344 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674644086.856:4241474): avc: denied { open } for pid=24344 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644086.856:4241474): arch=c000003e syscall=2 success=yes exit=18 a0=5652a7fe7f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=24344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644086.856:4241474): proctitle="dovecot/auth"
type=AVC msg=audit(1674644086.856:4241475): avc: denied { getattr } for pid=24344 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644086.856:4241475): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffeea2946e0 a2=7ffeea2946e0 a3=fffffc00 items=0 ppid=5547 pid=24344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644086.856:4241475): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674644101.101:4241476): pid=24428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674644101.101:4241477): pid=24427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644101.102:4241479): pid=24427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644101.102:4241478): pid=24428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644101.103:4241480): pid=24427 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257627 res=1
type=LOGIN msg=audit(1674644101.103:4241481): pid=24428 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257628 res=1
type=USER_START msg=audit(1674644101.146:4241482): pid=24427 uid=0 auid=0 ses=257627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674644101.147:4241483): pid=24428 uid=0 auid=1055 ses=257628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644101.148:4241484): pid=24428 uid=0 auid=1055 ses=257628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644101.148:4241485): pid=24427 uid=0 auid=0 ses=257627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644101.574:4241486): pid=24428 uid=0 auid=1055 ses=257628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644101.579:4241487): pid=24428 uid=0 auid=1055 ses=257628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644104.590:4241488): pid=24427 uid=0 auid=0 ses=257627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644104.600:4241489): pid=24427 uid=0 auid=0 ses=257627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644107.347:4241490): pid=24483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644107.347:4241491): pid=24483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644107.347:4241492): pid=24483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24483 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644107.506:4241493): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24483 suid=74 rport=56030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644107.506:4241494): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24483 suid=74 rport=56030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=USER_AUTH msg=audit(1674644108.257:4241495): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=146.59.127.25 addr=146.59.127.25 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644109.893:4241496): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644110.056:4241497): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24483 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644110.056:4241498): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24483 suid=74 rport=56030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644110.058:4241499): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644110.058:4241500): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644110.058:4241501): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644110.058:4241502): pid=24482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=ssh res=failed'
type=AVC msg=audit(1674644112.015:4241503): avc: denied { name_connect } for pid=24344 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674644112.015:4241503): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffeea2944d0 a2=10 a3=7ffeea2944cc items=0 ppid=5547 pid=24344 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644112.015:4241503): proctitle="dovecot/auth"
type=AVC msg=audit(1674644112.028:4241504): avc: denied { write } for pid=24353 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674644112.028:4241504): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc0aaed0f0 a2=6e a3=63d10a90 items=0 ppid=5547 pid=24353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644112.028:4241504): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674644126.126:4241505): pid=24645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644126.126:4241506): pid=24645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644126.126:4241507): pid=24645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644126.283:4241508): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24645 suid=74 rport=49072 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644126.283:4241509): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24645 suid=74 rport=49072 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644126.873:4241510): pid=24650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644126.873:4241511): pid=24650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644126.873:4241512): pid=24650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674644127.012:4241513): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=87.153.80.30 addr=87.153.80.30 terminal=ssh res=failed'
type=CRYPTO_SESSION msg=audit(1674644127.013:4241514): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24650 suid=74 rport=37320 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644127.013:4241515): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24650 suid=74 rport=37320 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=USER_AUTH msg=audit(1674644127.679:4241516): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=141.94.106.15 addr=141.94.106.15 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644128.588:4241517): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644128.747:4241518): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24645 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644128.747:4241519): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24645 suid=74 rport=49072 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644128.749:4241520): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644128.749:4241521): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644128.749:4241522): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644128.749:4241523): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.153.80.30 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644129.255:4241524): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644129.402:4241525): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24650 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644129.402:4241526): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24650 suid=74 rport=37320 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644129.405:4241527): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644129.405:4241528): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644129.405:4241529): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644129.405:4241530): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644130.953:4241531): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644130.953:4241531): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fabc172b010 items=0 ppid=24679 pid=24682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644130.953:4241531): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644130.960:4241532): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644130.960:4241532): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f240c716010 items=0 ppid=24679 pid=24683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644130.960:4241532): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644130.966:4241533): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644130.966:4241533): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f59c9362010 items=0 ppid=24679 pid=24684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644130.966:4241533): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644130.972:4241534): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644130.972:4241534): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe98cee0010 items=0 ppid=24679 pid=24685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644130.972:4241534): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644131.346:4241535): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644131.346:4241535): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0aebf24010 items=0 ppid=24679 pid=24695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644131.346:4241535): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003135392E36352E3132382E323431002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644131.355:4241536): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644131.355:4241536): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe343c9e010 items=0 ppid=24679 pid=24696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644131.355:4241536): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003135392E36352E3132382E323431002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644131.363:4241537): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674644131.363:4241537): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fee1a7af010 items=0 ppid=24679 pid=24697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644131.363:4241537): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038372E3135332E38302E3330002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644131.370:4241538): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644131.370:4241538): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff19756a010 items=0 ppid=24679 pid=24698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644131.370:4241538): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038372E3135332E38302E3330002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644133.158:4241539): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644133.158:4241539): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b41e9082010 items=0 ppid=24722 pid=24727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644133.158:4241539): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130312E3233312E3130382E313734002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=CRYPTO_KEY_USER msg=audit(1674644145.857:4241540): pid=24806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644145.858:4241541): pid=24806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644145.858:4241542): pid=24806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644146.180:4241543): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24806 suid=74 rport=44844 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644146.180:4241544): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24806 suid=74 rport=44844 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=USER_AUTH msg=audit(1674644147.579:4241545): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=187.103.67.186 addr=187.103.67.186 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644149.902:4241546): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644150.228:4241547): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24806 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644150.228:4241548): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24806 suid=74 rport=44844 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644150.231:4241549): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644150.231:4241550): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644150.231:4241551): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644150.231:4241552): pid=24805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644161.630:4241553): pid=24897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644161.630:4241554): pid=24897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644161.631:4241555): pid=24897 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257629 res=1
type=USER_START msg=audit(1674644161.670:4241556): pid=24897 uid=0 auid=1055 ses=257629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644161.674:4241557): pid=24897 uid=0 auid=1055 ses=257629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644161.996:4241558): pid=24897 uid=0 auid=1055 ses=257629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644161.999:4241559): pid=24897 uid=0 auid=1055 ses=257629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674644172.919:4241560): avc: denied { read append } for pid=24975 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674644172.919:4241560): avc: denied { open } for pid=24975 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644172.919:4241560): arch=c000003e syscall=2 success=yes exit=8 a0=563be1baba60 a1=402 a2=7ffec10d78d0 a3=7ffec10d7360 items=0 ppid=5547 pid=24975 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644172.919:4241560): proctitle="dovecot/imap"
type=AVC msg=audit(1674644172.920:4241561): avc: denied { getattr } for pid=24975 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644172.920:4241561): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffec10d7830 a2=7ffec10d7830 a3=7ffec10d72a0 items=0 ppid=5547 pid=24975 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644172.920:4241561): proctitle="dovecot/imap"
type=AVC msg=audit(1674644172.920:4241562): avc: denied { write } for pid=24975 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644172.920:4241562): arch=c000003e syscall=2 success=yes exit=10 a0=563be1bb0990 a1=2 a2=7ffec10d75d0 a3=7ffec10d7060 items=0 ppid=5547 pid=24975 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644172.920:4241562): proctitle="dovecot/imap"
type=AVC msg=audit(1674644172.920:4241563): avc: denied { lock } for pid=24975 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644172.920:4241563): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffec10d74d0 a3=63d10acc items=0 ppid=5547 pid=24975 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644172.920:4241563): proctitle="dovecot/imap"
type=AVC msg=audit(1674644172.920:4241564): avc: denied { read } for pid=24975 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674644172.920:4241564): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=563be1bd9300 a2=90800 a3=0 items=0 ppid=5547 pid=24975 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644172.920:4241564): proctitle="dovecot/imap"
type=AVC msg=audit(1674644172.921:4241565): avc: denied { getattr } for pid=24975 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644172.921:4241565): arch=c000003e syscall=4 success=yes exit=0 a0=563be1b9ba60 a1=7ffec10d7880 a2=7ffec10d7880 a3=6f632e6f72676173 items=0 ppid=5547 pid=24975 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644172.921:4241565): proctitle="dovecot/imap"
type=AVC msg=audit(1674644174.894:4241566): avc: denied { write } for pid=24986 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674644174.894:4241566): arch=c000003e syscall=21 success=yes exit=0 a0=55a74e4564c0 a1=2 a2=7b48 a3=7ffee4253920 items=0 ppid=5547 pid=24986 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644174.894:4241566): proctitle="dovecot/imap"
type=AVC msg=audit(1674644175.118:4241567): avc: denied { add_name } for pid=24986 comm="imap" name="dovecot-uidlist.lock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674644175.118:4241567): avc: denied { create } for pid=24986 comm="imap" name="dovecot-uidlist.lock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644175.118:4241567): arch=c000003e syscall=2 success=yes exit=18 a0=55a74e456208 a1=c2 a2=1b6 a3=63d10acf items=0 ppid=5547 pid=24986 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644175.118:4241567): proctitle="dovecot/imap"
type=AVC msg=audit(1674644175.119:4241568): avc: denied { remove_name } for pid=24986 comm="imap" name="1674550657.M639786P16442.host.nexidigital.com,S=38179,W=38927:2," dev="vda1" ino=260247854 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674644175.119:4241568): avc: denied { rename } for pid=24986 comm="imap" name="1674550657.M639786P16442.host.nexidigital.com,S=38179,W=38927:2," dev="vda1" ino=260247854 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644175.119:4241568): arch=c000003e syscall=82 success=yes exit=0 a0=55a74e4564a0 a1=55a74e4566e8 a2=53 a3=7ffee4253820 items=0 ppid=5547 pid=24986 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644175.119:4241568): proctitle="dovecot/imap"
type=AVC msg=audit(1674644175.119:4241569): avc: denied { unlink } for pid=24986 comm="imap" name="dovecot-uidlist.lock" dev="vda1" ino=33481508 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644175.119:4241569): arch=c000003e syscall=87 success=yes exit=0 a0=55a74e52f0f0 a1=7fbf000cf071 a2=2f9 a3=7ffee4253ba0 items=0 ppid=5547 pid=24986 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644175.119:4241569): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674644176.661:4241570): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644176.662:4241571): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644176.662:4241572): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25001 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644176.833:4241573): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25001 suid=74 rport=33884 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644176.833:4241574): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25001 suid=74 rport=33884 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=USER_AUTH msg=audit(1674644177.648:4241575): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=146.59.127.25 addr=146.59.127.25 terminal=ssh res=failed'
type=AVC msg=audit(1674644178.825:4241576): avc: denied { write } for pid=24353 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674644178.825:4241576): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc0aaed0f0 a2=6e a3=63d10ad2 items=0 ppid=5547 pid=24353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644178.825:4241576): proctitle=646F7665636F742F61757468002D77
type=USER_AUTH msg=audit(1674644180.093:4241577): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644180.272:4241578): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25001 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644180.272:4241579): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25001 suid=74 rport=33884 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644180.274:4241580): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644180.274:4241581): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644180.274:4241582): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25000 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644180.274:4241583): pid=25000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=146.59.127.25 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644181.012:4241584): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644181.012:4241584): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4e5085e010 items=0 ppid=25087 pid=25090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644181.012:4241584): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644181.019:4241585): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644181.019:4241585): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6d1063f010 items=0 ppid=25087 pid=25091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644181.019:4241585): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644181.026:4241586): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644181.026:4241586): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f68198bd010 items=0 ppid=25087 pid=25092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644181.026:4241586): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644181.033:4241587): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644181.033:4241587): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fac29290010 items=0 ppid=25087 pid=25093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644181.033:4241587): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644181.429:4241588): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644181.429:4241588): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc9da1fa010 items=0 ppid=25087 pid=25114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644181.429:4241588): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003230302E3132322E3234392E323033002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644181.437:4241589): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644181.437:4241589): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fce1a5b7010 items=0 ppid=25087 pid=25116 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644181.437:4241589): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003230302E3132322E3234392E323033002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644181.444:4241590): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644181.444:4241590): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5fb371e010 items=0 ppid=25087 pid=25118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644181.444:4241590): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003134362E35392E3132372E3235002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644181.451:4241591): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644181.451:4241591): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff6489f8010 items=0 ppid=25087 pid=25120 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644181.451:4241591): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003134362E35392E3132372E3235002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674644184.974:4241592): pid=25174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644184.974:4241593): pid=25174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644184.974:4241594): pid=25174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25174 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644185.197:4241595): pid=25162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=25174 suid=74 rport=47630 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.116.144.39 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644185.197:4241596): pid=25162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=25174 suid=74 rport=47630 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.116.144.39 terminal=? res=success'
type=USER_AUTH msg=audit(1674644185.724:4241597): pid=25162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=137.116.144.39 addr=137.116.144.39 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644186.246:4241598): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644186.246:4241598): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f04f7a09010 items=0 ppid=25188 pid=25213 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644186.246:4241598): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644186.251:4241599): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644186.251:4241599): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f32526c2010 items=0 ppid=25188 pid=25214 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644186.251:4241599): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644186.256:4241600): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644186.256:4241600): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f280c57d010 items=0 ppid=25188 pid=25215 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644186.256:4241600): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644186.262:4241601): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644186.262:4241601): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f66f0305010 items=0 ppid=25188 pid=25216 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644186.262:4241601): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644186.700:4241602): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644186.700:4241602): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f617c842010 items=0 ppid=25188 pid=25225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644186.700:4241602): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132342E3130362E3232372E3730002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644186.707:4241603): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644186.707:4241603): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe02be11010 items=0 ppid=25188 pid=25226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644186.707:4241603): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132342E3130362E3232372E3730002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644186.715:4241604): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644186.715:4241604): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5f09fb9010 items=0 ppid=25188 pid=25227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644186.715:4241604): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003133372E3131362E3134342E3339002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644186.721:4241605): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644186.721:4241605): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f16660d3010 items=0 ppid=25188 pid=25228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644186.721:4241605): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003133372E3131362E3134342E3339002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674644187.264:4241606): pid=25162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.116.144.39 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644190.230:4241607): pid=25261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644190.230:4241608): pid=25261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644190.230:4241609): pid=25261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25261 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644190.372:4241610): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25261 suid=74 rport=41042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644190.372:4241611): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25261 suid=74 rport=41042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=USER_AUTH msg=audit(1674644191.041:4241612): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=141.94.106.15 addr=141.94.106.15 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644192.737:4241613): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644192.882:4241614): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25261 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644192.882:4241615): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25261 suid=74 rport=41042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644192.883:4241616): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644192.883:4241617): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644192.883:4241618): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644192.884:4241619): pid=25260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=141.94.106.15 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644196.511:4241620): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644196.511:4241620): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fad82be1010 items=0 ppid=25312 pid=25316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644196.511:4241620): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644196.518:4241621): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644196.518:4241621): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f944d7b3010 items=0 ppid=25312 pid=25317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644196.518:4241621): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644196.524:4241622): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644196.524:4241622): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fca58d1b010 items=0 ppid=25312 pid=25318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644196.524:4241622): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644196.530:4241623): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644196.530:4241623): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc60e858010 items=0 ppid=25312 pid=25319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644196.530:4241623): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644196.858:4241624): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644196.858:4241624): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdd25508010 items=0 ppid=25312 pid=25327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644196.858:4241624): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138322E37342E34372E323532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644196.866:4241625): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644196.866:4241625): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0ca0dd6010 items=0 ppid=25312 pid=25328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644196.866:4241625): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138322E37342E34372E323532002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644196.873:4241626): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644196.873:4241626): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9b3d1a9010 items=0 ppid=25312 pid=25329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644196.873:4241626): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003134312E39342E3130362E3135002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644196.881:4241627): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644196.881:4241627): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f62976eb010 items=0 ppid=25312 pid=25330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644196.881:4241627): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003134312E39342E3130362E3135002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674644209.966:4241628): pid=25420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644209.966:4241629): pid=25420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644209.966:4241630): pid=25420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25420 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644210.210:4241631): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25420 suid=74 rport=56824 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644210.210:4241632): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25420 suid=74 rport=56824 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644210.619:4241633): pid=25424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644210.619:4241634): pid=25424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644210.619:4241635): pid=25424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644210.793:4241636): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=25424 suid=74 rport=44780 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644210.793:4241637): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=25424 suid=74 rport=44780 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674644211.335:4241638): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=195.182.38.200 addr=195.182.38.200 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644211.767:4241639): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=AVC msg=audit(1674644212.348:4241640): avc: denied { name_connect } for pid=24344 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674644212.348:4241640): arch=c000003e syscall=42 success=no exit=-115 a0=19 a1=7ffeea2944d0 a2=10 a3=7ffeea2944cc items=0 ppid=5547 pid=24344 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644212.348:4241640): proctitle="dovecot/auth"
type=USER_AUTH msg=audit(1674644213.111:4241641): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644213.364:4241642): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25420 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644213.364:4241643): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25420 suid=74 rport=56824 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644213.365:4241644): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644213.365:4241645): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644213.366:4241646): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25419 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644213.366:4241647): pid=25419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644213.542:4241648): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644216.718:4241649): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644218.178:4241650): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644221.034:4241651): pid=25495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644221.034:4241652): pid=25495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644221.035:4241653): pid=25495 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257630 res=1
type=USER_START msg=audit(1674644221.064:4241654): pid=25495 uid=0 auid=1055 ses=257630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644221.067:4241655): pid=25495 uid=0 auid=1055 ses=257630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674644221.361:4241656): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674644221.444:4241657): pid=25495 uid=0 auid=1055 ses=257630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644221.447:4241658): pid=25495 uid=0 auid=1055 ses=257630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674644223.179:4241659): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644226.355:4241660): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25424 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644226.355:4241661): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25424 suid=74 rport=44780 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644226.356:4241662): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644226.356:4241663): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644226.356:4241664): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644226.357:4241665): pid=25423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=AVC msg=audit(1674644230.821:4241666): avc: denied { write } for pid=24353 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674644230.821:4241666): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc0aaed0f0 a2=6e a3=63d10b06 items=0 ppid=5547 pid=24353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644230.821:4241666): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674644231.327:4241667): pid=25568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644231.327:4241668): pid=25568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644231.327:4241669): pid=25568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644231.678:4241670): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25568 suid=74 rport=41968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644231.678:4241671): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25568 suid=74 rport=41968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=USER_AUTH msg=audit(1674644233.185:4241672): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=187.103.67.186 addr=187.103.67.186 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644234.982:4241673): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644235.338:4241674): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25568 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644235.338:4241675): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25568 suid=74 rport=41968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644235.339:4241676): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644235.339:4241677): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644235.339:4241678): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644235.339:4241679): pid=25566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.103.67.186 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644237.063:4241680): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644237.063:4241680): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa893064010 items=0 ppid=25604 pid=25607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644237.063:4241680): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644237.067:4241681): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644237.067:4241681): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc0f0af5010 items=0 ppid=25604 pid=25608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644237.067:4241681): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644237.071:4241682): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644237.071:4241682): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff5b45b0010 items=0 ppid=25604 pid=25609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644237.071:4241682): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644237.075:4241683): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644237.075:4241683): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd2f1f21010 items=0 ppid=25604 pid=25610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644237.075:4241683): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644237.390:4241684): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644237.390:4241684): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5e4d2cb010 items=0 ppid=25604 pid=25621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644237.390:4241684): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003135392E36352E39312E313035002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644237.397:4241685): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644237.397:4241685): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdac090b010 items=0 ppid=25604 pid=25622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644237.397:4241685): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003135392E36352E39312E313035002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644237.406:4241686): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644237.406:4241686): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0a8b6f5010 items=0 ppid=25604 pid=25623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644237.406:4241686): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138372E3130332E36372E313836002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644237.412:4241687): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644237.412:4241687): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9dcd3ee010 items=0 ppid=25604 pid=25625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644237.412:4241687): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138372E3130332E36372E313836002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674644243.406:4241688): pid=25668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644243.406:4241689): pid=25668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644243.406:4241690): pid=25668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644243.655:4241691): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25668 suid=74 rport=43708 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644243.655:4241692): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25668 suid=74 rport=43708 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=USER_AUTH msg=audit(1674644244.754:4241693): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=46.101.38.229 addr=46.101.38.229 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644247.394:4241694): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644247.646:4241695): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25668 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644247.646:4241696): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25668 suid=74 rport=43708 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644247.651:4241697): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644247.651:4241698): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644247.651:4241699): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644247.651:4241700): pid=25667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644281.466:4241701): pid=25924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674644281.466:4241702): pid=25925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644281.466:4241703): pid=25924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644281.466:4241704): pid=25925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644281.466:4241705): pid=25924 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257631 res=1
type=LOGIN msg=audit(1674644281.466:4241706): pid=25925 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257632 res=1
type=USER_START msg=audit(1674644281.502:4241707): pid=25924 uid=0 auid=0 ses=257631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674644281.503:4241708): pid=25925 uid=0 auid=1055 ses=257632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644281.505:4241709): pid=25924 uid=0 auid=0 ses=257631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644281.505:4241710): pid=25925 uid=0 auid=1055 ses=257632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644281.555:4241711): pid=25924 uid=0 auid=0 ses=257631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644281.557:4241712): pid=25924 uid=0 auid=0 ses=257631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644281.805:4241713): pid=25925 uid=0 auid=1055 ses=257632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644281.806:4241714): pid=25925 uid=0 auid=1055 ses=257632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644295.339:4241715): pid=26032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644295.339:4241716): pid=26032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644295.340:4241717): pid=26032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26032 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644295.593:4241718): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26032 suid=74 rport=56926 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644295.593:4241719): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26032 suid=74 rport=56926 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=USER_AUTH msg=audit(1674644296.671:4241720): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=195.182.38.200 addr=195.182.38.200 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644298.783:4241721): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644299.030:4241722): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26032 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644299.030:4241723): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26032 suid=74 rport=56926 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644299.031:4241724): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644299.031:4241725): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644299.031:4241726): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644299.031:4241727): pid=26031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.182.38.200 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644301.161:4241728): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644301.161:4241728): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4c981a3010 items=0 ppid=26074 pid=26077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644301.161:4241728): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644301.166:4241729): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644301.166:4241729): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9311304010 items=0 ppid=26074 pid=26078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644301.166:4241729): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644301.171:4241730): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644301.171:4241730): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f18ea458010 items=0 ppid=26074 pid=26079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644301.171:4241730): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644301.176:4241731): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644301.176:4241731): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5e32a25010 items=0 ppid=26074 pid=26080 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644301.176:4241731): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644301.536:4241732): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644301.536:4241732): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0c0d4fe010 items=0 ppid=26074 pid=26092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644301.536:4241732): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003137382E3132382E3132352E323137002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644301.565:4241733): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644301.565:4241733): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f343bda5010 items=0 ppid=26074 pid=26093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644301.565:4241733): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003137382E3132382E3132352E323137002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644301.581:4241734): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644301.581:4241734): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f56add2d010 items=0 ppid=26074 pid=26094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644301.581:4241734): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003139352E3138322E33382E323030002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644301.590:4241735): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644301.590:4241735): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f95cf452010 items=0 ppid=26074 pid=26095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644301.590:4241735): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003139352E3138322E33382E323030002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674644302.080:4241736): avc: denied { name_connect } for pid=24344 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674644302.080:4241736): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffeea2944d0 a2=10 a3=7ffeea2944cc items=0 ppid=5547 pid=24344 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644302.080:4241736): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674644339.833:4241737): pid=26385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644339.833:4241738): pid=26385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644339.833:4241739): pid=26385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644340.083:4241740): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26385 suid=74 rport=42100 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644340.083:4241741): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26385 suid=74 rport=42100 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=USER_AUTH msg=audit(1674644341.184:4241742): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=46.101.38.229 addr=46.101.38.229 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644341.826:4241743): pid=26398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644341.827:4241744): pid=26398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644341.828:4241745): pid=26398 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257633 res=1
type=USER_START msg=audit(1674644341.848:4241746): pid=26398 uid=0 auid=1055 ses=257633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644341.849:4241747): pid=26398 uid=0 auid=1055 ses=257633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644342.157:4241748): pid=26398 uid=0 auid=1055 ses=257633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644342.159:4241749): pid=26398 uid=0 auid=1055 ses=257633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674644343.140:4241750): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644343.395:4241751): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26385 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644343.395:4241752): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26385 suid=74 rport=42100 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644343.396:4241753): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644343.396:4241754): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644343.396:4241755): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26384 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644343.396:4241756): pid=26384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.101.38.229 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644346.142:4241757): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644346.142:4241757): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1d8f4f3010 items=0 ppid=26436 pid=26440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644346.142:4241757): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644346.146:4241758): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644346.146:4241758): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb2f38ab010 items=0 ppid=26436 pid=26441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644346.146:4241758): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644346.151:4241759): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644346.151:4241759): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ffb6160b010 items=0 ppid=26436 pid=26442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644346.151:4241759): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644346.157:4241760): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644346.157:4241760): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fae6a4b6010 items=0 ppid=26436 pid=26443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644346.157:4241760): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644346.502:4241761): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644346.502:4241761): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0dfe404010 items=0 ppid=26436 pid=26453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644346.502:4241761): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132352E3232392E34382E313635002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644346.508:4241762): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644346.508:4241762): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f783cf56010 items=0 ppid=26436 pid=26454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644346.508:4241762): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132352E3232392E34382E313635002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644346.515:4241763): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644346.515:4241763): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efd92c8c010 items=0 ppid=26436 pid=26455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644346.515:4241763): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034362E3130312E33382E323239002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644346.523:4241764): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644346.523:4241764): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3f5e02b010 items=0 ppid=26436 pid=26456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644346.523:4241764): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034362E3130312E33382E323239002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674644401.176:4241765): pid=26828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644401.176:4241766): pid=26828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644401.176:4241767): pid=26828 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257634 res=1
type=USER_ACCT msg=audit(1674644401.178:4241768): pid=26829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644401.179:4241769): pid=26829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644401.179:4241770): pid=26829 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257635 res=1
type=USER_ACCT msg=audit(1674644401.179:4241771): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644401.179:4241772): pid=26830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644401.179:4241773): pid=26830 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257636 res=1
type=USER_START msg=audit(1674644401.230:4241774): pid=26829 uid=0 auid=0 ses=257635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674644401.230:4241775): pid=26830 uid=0 auid=1055 ses=257636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674644401.231:4241776): pid=26828 uid=0 auid=0 ses=257634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644401.232:4241777): pid=26830 uid=0 auid=1055 ses=257636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644401.233:4241778): pid=26829 uid=0 auid=0 ses=257635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644401.233:4241779): pid=26828 uid=0 auid=0 ses=257634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644401.293:4241780): pid=26828 uid=0 auid=0 ses=257634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644401.296:4241781): pid=26828 uid=0 auid=0 ses=257634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644401.620:4241782): pid=26830 uid=0 auid=1055 ses=257636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644401.625:4241783): pid=26830 uid=0 auid=1055 ses=257636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644404.612:4241784): pid=26829 uid=0 auid=0 ses=257635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644404.615:4241785): pid=26829 uid=0 auid=0 ses=257635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644449.859:4241786): pid=27181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644449.860:4241787): pid=27181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644449.860:4241788): pid=27181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27181 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644450.245:4241789): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27181 suid=74 rport=16862 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644450.246:4241790): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27181 suid=74 rport=16862 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=? res=success'
type=USER_AUTH msg=audit(1674644451.890:4241791): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=93.41.209.74 addr=93.41.209.74 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644453.947:4241792): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644454.328:4241793): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27181 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644454.328:4241794): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27181 suid=74 rport=16862 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644454.330:4241795): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644454.330:4241796): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644454.330:4241797): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27179 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644454.330:4241798): pid=27179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644461.637:4241799): pid=27256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644461.638:4241800): pid=27256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644461.639:4241801): pid=27256 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257637 res=1
type=USER_ACCT msg=audit(1674644461.640:4241802): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644461.640:4241803): pid=27255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644461.640:4241804): pid=27255 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257638 res=1
type=USER_START msg=audit(1674644461.684:4241805): pid=27255 uid=0 auid=0 ses=257638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674644461.686:4241806): pid=27256 uid=0 auid=1055 ses=257637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644461.687:4241807): pid=27256 uid=0 auid=1055 ses=257637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644461.687:4241808): pid=27255 uid=0 auid=0 ses=257638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644461.742:4241809): pid=27255 uid=0 auid=0 ses=257638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644461.745:4241810): pid=27255 uid=0 auid=0 ses=257638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644462.038:4241811): pid=27256 uid=0 auid=1055 ses=257637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644462.042:4241812): pid=27256 uid=0 auid=1055 ses=257637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644510.585:4241813): pid=27592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644510.585:4241814): pid=27592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644510.585:4241815): pid=27592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27592 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674644521.059:4241816): pid=27654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644521.060:4241817): pid=27654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644521.061:4241818): pid=27654 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257639 res=1
type=USER_START msg=audit(1674644521.076:4241819): pid=27654 uid=0 auid=1055 ses=257639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644521.077:4241820): pid=27654 uid=0 auid=1055 ses=257639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644521.315:4241821): pid=27654 uid=0 auid=1055 ses=257639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644521.316:4241822): pid=27654 uid=0 auid=1055 ses=257639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674644549.512:4241823): avc: denied { read } for pid=27887 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674644549.512:4241823): avc: denied { open } for pid=27887 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644549.512:4241823): arch=c000003e syscall=2 success=yes exit=18 a0=55f759efdf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=27887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644549.512:4241823): proctitle="dovecot/auth"
type=AVC msg=audit(1674644549.513:4241824): avc: denied { getattr } for pid=27887 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644549.513:4241824): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcf3e5d3a0 a2=7ffcf3e5d3a0 a3=fffffc00 items=0 ppid=5547 pid=27887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644549.513:4241824): proctitle="dovecot/auth"
type=AVC msg=audit(1674644550.062:4241825): avc: denied { name_connect } for pid=27887 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674644550.062:4241825): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcf3e5d190 a2=10 a3=7ffcf3e5d18c items=0 ppid=5547 pid=27887 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644550.062:4241825): proctitle="dovecot/auth"
type=AVC msg=audit(1674644550.092:4241826): avc: denied { write } for pid=27918 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674644550.092:4241826): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff7e07ac30 a2=6e a3=63d10c46 items=0 ppid=5547 pid=27918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644550.092:4241826): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674644576.942:4241827): pid=28152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644576.942:4241828): pid=28152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644576.942:4241829): pid=28152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28152 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644577.150:4241830): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28152 suid=74 rport=51020 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644577.151:4241831): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28152 suid=74 rport=51020 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=? res=success'
type=USER_AUTH msg=audit(1674644578.124:4241832): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=85.172.107.10 addr=85.172.107.10 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644580.282:4241833): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644580.496:4241834): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28152 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644580.497:4241835): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28152 suid=74 rport=51020 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644580.498:4241836): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644580.498:4241837): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644580.498:4241838): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28151 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644580.498:4241839): pid=28151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644581.334:4241840): pid=28176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644581.335:4241841): pid=28176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644581.335:4241842): pid=28176 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257640 res=1
type=USER_START msg=audit(1674644581.358:4241843): pid=28176 uid=0 auid=1055 ses=257640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644581.361:4241844): pid=28176 uid=0 auid=1055 ses=257640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644581.710:4241845): pid=28176 uid=0 auid=1055 ses=257640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644581.712:4241846): pid=28176 uid=0 auid=1055 ses=257640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644594.914:4241847): pid=28272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644594.914:4241848): pid=28272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644594.914:4241849): pid=28272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28272 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644595.151:4241850): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=28272 suid=74 rport=42612 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644595.151:4241851): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=28272 suid=74 rport=42612 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=? res=success'
type=USER_AUTH msg=audit(1674644596.213:4241852): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=64.227.28.246 addr=64.227.28.246 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644598.175:4241853): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644598.412:4241854): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28272 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644598.412:4241855): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28272 suid=74 rport=42612 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644598.414:4241856): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644598.414:4241857): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644598.414:4241858): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644598.414:4241859): pid=28269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644631.140:4241860): pid=28522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644631.140:4241861): pid=28522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644631.140:4241862): pid=28522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28522 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644631.352:4241863): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28522 suid=74 rport=42684 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644631.352:4241864): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28522 suid=74 rport=42684 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=? res=success'
type=USER_AUTH msg=audit(1674644632.339:4241865): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.153.55.245 addr=43.153.55.245 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644634.576:4241866): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644634.791:4241867): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28522 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644634.791:4241868): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28522 suid=74 rport=42684 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644634.793:4241869): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644634.793:4241870): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644634.793:4241871): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28521 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644634.793:4241872): pid=28521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644641.733:4241873): pid=28587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644641.734:4241874): pid=28587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644641.734:4241875): pid=28587 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257641 res=1
type=USER_START msg=audit(1674644641.752:4241876): pid=28587 uid=0 auid=1055 ses=257641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644641.754:4241877): pid=28587 uid=0 auid=1055 ses=257641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644642.059:4241878): pid=28587 uid=0 auid=1055 ses=257641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644642.062:4241879): pid=28587 uid=0 auid=1055 ses=257641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644645.074:4241880): pid=28623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644645.074:4241881): pid=28623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644645.074:4241882): pid=28623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28623 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644645.213:4241883): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28623 suid=74 rport=45924 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.205.104.173 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644645.213:4241884): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28623 suid=74 rport=45924 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.205.104.173 terminal=? res=success'
type=USER_AUTH msg=audit(1674644645.857:4241885): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=92.205.104.173 addr=92.205.104.173 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644647.879:4241886): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.205.104.173 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644648.021:4241887): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28623 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644648.021:4241888): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28623 suid=74 rport=45924 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.205.104.173 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644648.024:4241889): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644648.025:4241890): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644648.025:4241891): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28622 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644648.025:4241892): pid=28622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.205.104.173 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644692.869:4241893): pid=28946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644692.869:4241894): pid=28946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644692.869:4241895): pid=28946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644693.759:4241896): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=28946 suid=74 rport=48752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644693.759:4241897): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=28946 suid=74 rport=48752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674644694.514:4241898): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644696.932:4241899): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644697.205:4241900): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28946 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644697.205:4241901): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28946 suid=74 rport=48752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644697.206:4241902): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644697.207:4241903): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644697.207:4241904): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644697.207:4241905): pid=28938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674644701.079:4241906): pid=29005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644701.079:4241907): pid=29005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644701.079:4241908): pid=29005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257642 res=1
type=USER_ACCT msg=audit(1674644701.104:4241909): pid=29006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644701.104:4241910): pid=29006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644701.104:4241911): pid=29006 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257643 res=1
type=USER_ACCT msg=audit(1674644701.120:4241912): pid=29007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644701.120:4241913): pid=29007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644701.121:4241914): pid=29007 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257644 res=1
type=USER_START msg=audit(1674644701.163:4241915): pid=29005 uid=0 auid=0 ses=257642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674644701.164:4241916): pid=29006 uid=0 auid=0 ses=257643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674644701.165:4241917): pid=29007 uid=0 auid=1055 ses=257644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644701.165:4241918): pid=29007 uid=0 auid=1055 ses=257644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644701.166:4241919): pid=29006 uid=0 auid=0 ses=257643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644701.166:4241920): pid=29005 uid=0 auid=0 ses=257642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644701.307:4241921): pid=29006 uid=0 auid=0 ses=257643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644701.310:4241922): pid=29006 uid=0 auid=0 ses=257643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644701.516:4241923): pid=29007 uid=0 auid=1055 ses=257644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644701.519:4241924): pid=29007 uid=0 auid=1055 ses=257644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644704.585:4241925): pid=29005 uid=0 auid=0 ses=257642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644704.588:4241926): pid=29005 uid=0 auid=0 ses=257642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674644712.526:4241927): avc: denied { read } for pid=29102 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674644712.526:4241927): avc: denied { open } for pid=29102 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644712.526:4241927): arch=c000003e syscall=2 success=yes exit=18 a0=560c30fa1f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=29102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644712.526:4241927): proctitle="dovecot/auth"
type=AVC msg=audit(1674644712.526:4241928): avc: denied { getattr } for pid=29102 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644712.526:4241928): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffbd0c30d0 a2=7fffbd0c30d0 a3=fffffc00 items=0 ppid=5547 pid=29102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644712.526:4241928): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674644740.104:4241929): pid=29293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644740.104:4241930): pid=29293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644740.104:4241931): pid=29293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644740.338:4241932): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=29293 suid=74 rport=41496 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644740.338:4241933): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=29293 suid=74 rport=41496 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=? res=success'
type=USER_AUTH msg=audit(1674644741.388:4241934): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=64.227.28.246 addr=64.227.28.246 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644743.590:4241935): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644743.821:4241936): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29293 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644743.821:4241937): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29293 suid=74 rport=41496 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644743.822:4241938): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29291 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644743.823:4241939): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29291 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644743.823:4241940): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29291 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644743.823:4241941): pid=29291 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=64.227.28.246 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644746.472:4241942): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644746.472:4241942): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f202f886010 items=0 ppid=29346 pid=29350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644746.472:4241942): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644746.476:4241943): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644746.476:4241943): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc7918ea010 items=0 ppid=29346 pid=29352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644746.476:4241943): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644746.480:4241944): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644746.480:4241944): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f12a168f010 items=0 ppid=29346 pid=29353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644746.480:4241944): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644746.484:4241945): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644746.484:4241945): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f87155d2010 items=0 ppid=29346 pid=29355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644746.484:4241945): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644746.803:4241946): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644746.803:4241946): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f35beb81010 items=0 ppid=29346 pid=29363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644746.803:4241946): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003130332E3136322E32302E313638002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644746.811:4241947): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644746.811:4241947): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f69b8e70010 items=0 ppid=29346 pid=29364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644746.811:4241947): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003130332E3136322E32302E313638002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644746.819:4241948): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644746.819:4241948): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6603063010 items=0 ppid=29346 pid=29365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644746.819:4241948): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730036342E3232372E32382E323436002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644746.825:4241949): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644746.825:4241949): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff7e2e81010 items=0 ppid=29346 pid=29366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644746.825:4241949): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640036342E3232372E32382E323436002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674644757.424:4241950): pid=29436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644757.424:4241951): pid=29436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644757.424:4241952): pid=29436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644757.814:4241953): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29436 suid=74 rport=6926 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644757.814:4241954): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29436 suid=74 rport=6926 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=? res=success'
type=USER_AUTH msg=audit(1674644759.500:4241955): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=93.41.209.74 addr=93.41.209.74 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644761.507:4241956): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644761.522:4241957): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644761.522:4241957): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3fe7996010 items=0 ppid=29470 pid=29476 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644761.522:4241957): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644761.528:4241958): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644761.528:4241958): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f991008a010 items=0 ppid=29470 pid=29477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644761.528:4241958): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644761.534:4241959): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644761.534:4241959): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc4df650010 items=0 ppid=29470 pid=29478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644761.534:4241959): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644761.540:4241960): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674644761.540:4241960): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6741e5d010 items=0 ppid=29470 pid=29479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644761.540:4241960): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=USER_ACCT msg=audit(1674644761.615:4241961): pid=29486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644761.616:4241962): pid=29486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644761.617:4241963): pid=29486 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257645 res=1
type=USER_START msg=audit(1674644761.637:4241964): pid=29486 uid=0 auid=1055 ses=257645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644761.640:4241965): pid=29486 uid=0 auid=1055 ses=257645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644761.904:4241966): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29436 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644761.904:4241967): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29436 suid=74 rport=6926 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=? res=success'
type=CRED_DISP msg=audit(1674644761.911:4241968): pid=29486 uid=0 auid=1055 ses=257645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644761.914:4241969): pid=29486 uid=0 auid=1055 ses=257645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644761.917:4241970): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644761.917:4241971): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644761.918:4241972): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29435 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644761.918:4241973): pid=29435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=93.41.209.74 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644761.931:4241974): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644761.931:4241974): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9c5d97c010 items=0 ppid=29470 pid=29500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644761.931:4241974): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730033372E35392E3132302E313739002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644761.941:4241975): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644761.941:4241975): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f15a354f010 items=0 ppid=29470 pid=29501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644761.941:4241975): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640033372E35392E3132302E313739002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644761.951:4241976): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674644761.951:4241976): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fba38963010 items=0 ppid=29470 pid=29502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644761.951:4241976): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730039332E34312E3230392E3734002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644761.961:4241977): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644761.961:4241977): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feafc343010 items=0 ppid=29470 pid=29503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644761.961:4241977): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640039332E34312E3230392E3734002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674644790.419:4241978): avc: denied { name_connect } for pid=29102 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674644790.419:4241978): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fffbd0c2ec0 a2=10 a3=7fffbd0c2ebc items=0 ppid=5547 pid=29102 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644790.419:4241978): proctitle="dovecot/auth"
type=AVC msg=audit(1674644790.453:4241979): avc: denied { write } for pid=29732 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674644790.453:4241979): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffef41ff530 a2=6e a3=63d10d36 items=0 ppid=5547 pid=29732 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644790.453:4241979): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674644800.873:4241980): pid=29806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644800.873:4241981): pid=29806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644800.873:4241982): pid=29806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644801.121:4241983): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29806 suid=74 rport=45312 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.59.189.220 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644801.121:4241984): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29806 suid=74 rport=45312 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.59.189.220 terminal=? res=success'
type=USER_AUTH msg=audit(1674644802.278:4241985): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=139.59.189.220 addr=139.59.189.220 terminal=ssh res=failed'
type=AVC msg=audit(1674644802.920:4241986): avc: denied { read append } for pid=29778 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674644802.920:4241986): avc: denied { open } for pid=29778 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644802.920:4241986): arch=c000003e syscall=2 success=yes exit=8 a0=561339e42a60 a1=402 a2=7ffd30fb7240 a3=7ffd30fb6ce0 items=0 ppid=5547 pid=29778 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644802.920:4241986): proctitle="dovecot/imap"
type=AVC msg=audit(1674644802.920:4241987): avc: denied { getattr } for pid=29778 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644802.920:4241987): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffd30fb71a0 a2=7ffd30fb71a0 a3=7ffd30fb6c20 items=0 ppid=5547 pid=29778 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644802.920:4241987): proctitle="dovecot/imap"
type=AVC msg=audit(1674644802.920:4241988): avc: denied { write } for pid=29778 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644802.920:4241988): arch=c000003e syscall=2 success=yes exit=10 a0=561339e47960 a1=2 a2=7ffd30fb6f40 a3=7ffd30fb69e0 items=0 ppid=5547 pid=29778 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644802.920:4241988): proctitle="dovecot/imap"
type=AVC msg=audit(1674644802.920:4241989): avc: denied { lock } for pid=29778 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644802.920:4241989): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffd30fb6e40 a3=63d10d42 items=0 ppid=5547 pid=29778 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644802.920:4241989): proctitle="dovecot/imap"
type=AVC msg=audit(1674644802.921:4241990): avc: denied { read } for pid=29778 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674644802.921:4241990): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=561339e70300 a2=90800 a3=0 items=0 ppid=5547 pid=29778 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644802.921:4241990): proctitle="dovecot/imap"
type=AVC msg=audit(1674644802.921:4241991): avc: denied { getattr } for pid=29778 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674644802.921:4241991): arch=c000003e syscall=4 success=yes exit=0 a0=561339e32a60 a1=7ffd30fb71f0 a2=7ffd30fb71f0 a3=6f632e6f72676173 items=0 ppid=5547 pid=29778 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644802.921:4241991): proctitle="dovecot/imap"
type=USER_AUTH msg=audit(1674644804.520:4241992): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.59.189.220 terminal=ssh res=failed'
type=AVC msg=audit(1674644804.554:4241993): avc: denied { write } for pid=29827 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674644804.554:4241993): arch=c000003e syscall=21 success=yes exit=0 a0=5598c17404c0 a1=2 a2=7b48 a3=7ffe00d463e0 items=0 ppid=5547 pid=29827 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644804.554:4241993): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674644804.772:4241994): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29806 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644804.772:4241995): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29806 suid=74 rport=45312 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.59.189.220 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644804.774:4241996): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644804.774:4241997): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644804.774:4241998): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644804.774:4241999): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.59.189.220 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644809.231:4242000): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644809.231:4242000): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6a62700010 items=0 ppid=29859 pid=29864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644809.231:4242000): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3133382E35342E313037002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674644821.934:4242001): pid=29935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644821.934:4242002): pid=29935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644821.936:4242003): pid=29935 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257646 res=1
type=USER_START msg=audit(1674644821.962:4242004): pid=29935 uid=0 auid=1055 ses=257646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644821.965:4242005): pid=29935 uid=0 auid=1055 ses=257646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644822.254:4242006): pid=29935 uid=0 auid=1055 ses=257646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644822.256:4242007): pid=29935 uid=0 auid=1055 ses=257646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644865.919:4242008): pid=30251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644865.919:4242009): pid=30251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644865.919:4242010): pid=30251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30251 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644866.127:4242011): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30251 suid=74 rport=57294 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644866.127:4242012): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30251 suid=74 rport=57294 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=? res=success'
type=USER_AUTH msg=audit(1674644867.114:4242013): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.153.55.245 addr=43.153.55.245 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644869.282:4242014): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644869.498:4242015): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30251 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644869.498:4242016): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30251 suid=74 rport=57294 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644869.500:4242017): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644869.500:4242018): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644869.500:4242019): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30250 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644869.500:4242020): pid=30250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.153.55.245 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644871.507:4242021): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644871.507:4242021): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2c1d221010 items=0 ppid=30290 pid=30293 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644871.507:4242021): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644871.512:4242022): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644871.512:4242022): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efcd8ffc010 items=0 ppid=30290 pid=30294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644871.512:4242022): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644871.516:4242023): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674644871.516:4242023): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdb1847d010 items=0 ppid=30290 pid=30295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644871.516:4242023): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644871.520:4242024): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644871.520:4242024): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f21e73af010 items=0 ppid=30290 pid=30296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644871.520:4242024): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644871.809:4242025): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644871.809:4242025): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc5f0a82010 items=0 ppid=30290 pid=30307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644871.809:4242025): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730036382E3138332E3130352E313134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644871.816:4242026): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644871.816:4242026): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fccf1c12010 items=0 ppid=30290 pid=30308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644871.816:4242026): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640036382E3138332E3130352E313134002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644871.822:4242027): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644871.822:4242027): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2095c9f010 items=0 ppid=30290 pid=30309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644871.822:4242027): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034332E3135332E35352E323435002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644871.828:4242028): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644871.828:4242028): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feb795b3010 items=0 ppid=30290 pid=30310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644871.828:4242028): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034332E3135332E35352E323435002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674644872.821:4242029): avc: denied { name_connect } for pid=29102 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674644872.821:4242029): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fffbd0c2ec0 a2=10 a3=7fffbd0c2ebc items=0 ppid=5547 pid=29102 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644872.821:4242029): proctitle="dovecot/auth"
type=AVC msg=audit(1674644872.853:4242030): avc: denied { write } for pid=30369 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674644872.853:4242030): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff1ddd7080 a2=6e a3=63d10d88 items=0 ppid=5547 pid=30369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644872.853:4242030): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674644881.283:4242031): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644881.283:4242032): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644881.285:4242033): pid=30468 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257647 res=1
type=USER_START msg=audit(1674644881.311:4242034): pid=30468 uid=0 auid=1055 ses=257647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644881.313:4242035): pid=30468 uid=0 auid=1055 ses=257647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644881.604:4242036): pid=30468 uid=0 auid=1055 ses=257647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644881.607:4242037): pid=30468 uid=0 auid=1055 ses=257647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644890.171:4242038): pid=30533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644890.171:4242039): pid=30533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644890.171:4242040): pid=30533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644890.308:4242041): pid=30532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30533 suid=74 rport=46154 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.205.104.173 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644890.308:4242042): pid=30532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30533 suid=74 rport=46154 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=92.205.104.173 terminal=? res=success'
type=USER_AUTH msg=audit(1674644890.988:4242043): pid=30532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=92.205.104.173 addr=92.205.104.173 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644891.534:4242044): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644891.534:4242044): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa15ef4b010 items=0 ppid=30546 pid=30549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644891.534:4242044): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644891.539:4242045): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644891.539:4242045): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f86a099a010 items=0 ppid=30546 pid=30550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644891.539:4242045): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644891.543:4242046): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674644891.543:4242046): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6f991d7010 items=0 ppid=30546 pid=30551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644891.543:4242046): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644891.548:4242047): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644891.548:4242047): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8eef2ed010 items=0 ppid=30546 pid=30552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644891.548:4242047): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644891.842:4242048): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644891.842:4242048): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efd36ab8010 items=0 ppid=30546 pid=30560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644891.842:4242048): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003136352E3232372E39352E313331002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644891.849:4242049): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644891.849:4242049): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8f00130010 items=0 ppid=30546 pid=30561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644891.849:4242049): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003136352E3232372E39352E313331002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644891.856:4242050): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644891.856:4242050): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f61b4790010 items=0 ppid=30546 pid=30563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644891.856:4242050): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730039322E3230352E3130342E313733002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644891.863:4242051): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644891.863:4242051): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdf641e3010 items=0 ppid=30546 pid=30564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644891.863:4242051): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640039322E3230352E3130342E313733002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674644892.979:4242052): pid=30532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.205.104.173 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644897.122:4242053): pid=30604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644897.123:4242054): pid=30604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644897.123:4242055): pid=30604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30604 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644897.340:4242056): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30604 suid=74 rport=48818 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644897.340:4242057): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30604 suid=74 rport=48818 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=? res=success'
type=USER_AUTH msg=audit(1674644898.336:4242058): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=85.172.107.10 addr=85.172.107.10 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674644900.422:4242059): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674644900.642:4242060): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30604 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644900.642:4242061): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30604 suid=74 rport=48818 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644900.644:4242062): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644900.644:4242063): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644900.644:4242064): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30603 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674644900.644:4242065): pid=30603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=85.172.107.10 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644902.705:4242066): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644902.705:4242066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbe7bcda010 items=0 ppid=30644 pid=30647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644902.705:4242066): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644902.709:4242067): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644902.709:4242067): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe6148db010 items=0 ppid=30644 pid=30648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644902.709:4242067): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644902.713:4242068): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674644902.713:4242068): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f305fdea010 items=0 ppid=30644 pid=30649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644902.713:4242068): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644902.717:4242069): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644902.717:4242069): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f93e27ee010 items=0 ppid=30644 pid=30650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644902.717:4242069): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644903.027:4242070): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644903.027:4242070): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6c75391010 items=0 ppid=30644 pid=30659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644903.027:4242070): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003135372E3233302E35332E3636002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644903.033:4242071): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644903.033:4242071): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff55574f010 items=0 ppid=30644 pid=30660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644903.033:4242071): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003135372E3233302E35332E3636002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644903.038:4242072): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644903.038:4242072): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdebd0aa010 items=0 ppid=30644 pid=30661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644903.038:4242072): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038352E3137322E3130372E3130002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644903.043:4242073): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644903.043:4242073): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb1cbd8d010 items=0 ppid=30644 pid=30662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644903.043:4242073): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038352E3137322E3130372E3130002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674644941.777:4242074): pid=30919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644941.777:4242075): pid=30919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644941.781:4242076): pid=30919 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257648 res=1
type=USER_ACCT msg=audit(1674644941.782:4242077): pid=30918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674644941.782:4242078): pid=30918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674644941.782:4242079): pid=30918 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257649 res=1
type=USER_START msg=audit(1674644941.878:4242080): pid=30918 uid=0 auid=0 ses=257649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674644941.879:4242081): pid=30919 uid=0 auid=1055 ses=257648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644941.891:4242082): pid=30919 uid=0 auid=1055 ses=257648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674644941.900:4242083): pid=30918 uid=0 auid=0 ses=257649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644942.430:4242084): pid=30919 uid=0 auid=1055 ses=257648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644942.434:4242085): pid=30919 uid=0 auid=1055 ses=257648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674644943.607:4242086): pid=30918 uid=0 auid=0 ses=257649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674644943.609:4242087): pid=30918 uid=0 auid=0 ses=257649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674644993.965:4242088): pid=31316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644993.966:4242089): pid=31316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674644993.966:4242090): pid=31316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644994.210:4242091): pid=31315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31316 suid=74 rport=49242 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.59.189.220 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674644994.210:4242092): pid=31315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31316 suid=74 rport=49242 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=139.59.189.220 terminal=? res=success'
type=USER_AUTH msg=audit(1674644995.434:4242093): pid=31315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=139.59.189.220 addr=139.59.189.220 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674644996.601:4242094): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644996.601:4242094): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff4d74da010 items=0 ppid=31339 pid=31344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644996.601:4242094): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674644996.605:4242095): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644996.605:4242095): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f23e87f0010 items=0 ppid=31339 pid=31345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644996.605:4242095): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674644996.611:4242096): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674644996.611:4242096): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5274490010 items=0 ppid=31339 pid=31346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644996.611:4242096): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674644996.616:4242097): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674644996.616:4242097): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe1c916f010 items=0 ppid=31339 pid=31347 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644996.616:4242097): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674644996.917:4242098): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674644996.917:4242098): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3c27a03010 items=0 ppid=31339 pid=31356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644996.917:4242098): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730037322E3234302E3132352E313333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644996.923:4242099): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644996.923:4242099): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f40f8374010 items=0 ppid=31339 pid=31357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644996.923:4242099): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640037322E3234302E3132352E313333002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674644996.929:4242100): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674644996.929:4242100): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe178f53010 items=0 ppid=31339 pid=31358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644996.929:4242100): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003133392E35392E3138392E323230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674644996.934:4242101): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674644996.934:4242101): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe68a4bd010 items=0 ppid=31339 pid=31359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674644996.934:4242101): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003133392E35392E3138392E323230002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674644997.507:4242102): pid=31315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=139.59.189.220 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674645001.632:4242103): pid=31394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645001.634:4242104): pid=31394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645001.634:4242105): pid=31394 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257650 res=1
type=USER_ACCT msg=audit(1674645001.660:4242106): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645001.660:4242107): pid=31396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645001.660:4242108): pid=31396 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257651 res=1
type=AVC msg=audit(1674645001.670:4242109): avc: denied { read } for pid=31393 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674645001.670:4242109): avc: denied { open } for pid=31393 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645001.670:4242109): arch=c000003e syscall=2 success=yes exit=18 a0=55b3db609f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=31393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645001.670:4242109): proctitle="dovecot/auth"
type=AVC msg=audit(1674645001.670:4242110): avc: denied { getattr } for pid=31393 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645001.670:4242110): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd8316f2a0 a2=7ffd8316f2a0 a3=fffffc00 items=0 ppid=5547 pid=31393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645001.670:4242110): proctitle="dovecot/auth"
type=USER_START msg=audit(1674645001.670:4242111): pid=31394 uid=0 auid=0 ses=257650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645001.674:4242112): pid=31394 uid=0 auid=0 ses=257650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645001.695:4242113): pid=31395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645001.695:4242114): pid=31395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645001.695:4242115): pid=31395 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257652 res=1
type=USER_START msg=audit(1674645001.699:4242116): pid=31396 uid=0 auid=1055 ses=257651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645001.714:4242117): pid=31396 uid=0 auid=1055 ses=257651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674645001.730:4242118): pid=31395 uid=0 auid=0 ses=257652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645001.731:4242119): pid=31394 uid=0 auid=0 ses=257650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645001.731:4242120): pid=31395 uid=0 auid=0 ses=257652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645001.734:4242121): pid=31394 uid=0 auid=0 ses=257650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674645001.900:4242122): avc: denied { name_connect } for pid=31393 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674645001.900:4242122): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd8316f090 a2=10 a3=7ffd8316f08c items=0 ppid=5547 pid=31393 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645001.900:4242122): proctitle="dovecot/auth"
type=AVC msg=audit(1674645001.959:4242123): avc: denied { write } for pid=31416 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674645001.959:4242123): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff111d1ce0 a2=6e a3=63d10e09 items=0 ppid=5547 pid=31416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645001.959:4242123): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674645002.099:4242124): pid=31396 uid=0 auid=1055 ses=257651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645002.102:4242125): pid=31396 uid=0 auid=1055 ses=257651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645005.118:4242126): pid=31395 uid=0 auid=0 ses=257652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645005.120:4242127): pid=31395 uid=0 auid=0 ses=257652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674645011.258:4242128): avc: denied { write } for pid=31416 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674645011.258:4242128): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff111d1ce0 a2=6e a3=63d10e13 items=0 ppid=5547 pid=31416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645011.258:4242128): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674645061.140:4242129): pid=31830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645061.140:4242130): pid=31830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645061.141:4242131): pid=31830 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257653 res=1
type=USER_START msg=audit(1674645061.157:4242132): pid=31830 uid=0 auid=1055 ses=257653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645061.159:4242133): pid=31830 uid=0 auid=1055 ses=257653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645061.439:4242134): pid=31830 uid=0 auid=1055 ses=257653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645061.441:4242135): pid=31830 uid=0 auid=1055 ses=257653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674645068.891:4242136): pid=31886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645068.892:4242137): pid=31886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645068.892:4242138): pid=31886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.219:4242139): pid=31892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.220:4242140): pid=31892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.220:4242141): pid=31892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.223:4242142): pid=31894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.223:4242143): pid=31894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.223:4242144): pid=31894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.224:4242145): pid=31895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.225:4242146): pid=31895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.225:4242147): pid=31895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31895 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.225:4242148): pid=31896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.225:4242149): pid=31896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.225:4242150): pid=31896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31896 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.234:4242151): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31898 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.234:4242152): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31898 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.234:4242153): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31898 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.252:4242154): pid=31900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.252:4242155): pid=31900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645069.252:4242156): pid=31900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.554:4242157): pid=31888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31892 suid=74 rport=28720 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.555:4242158): pid=31888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31892 suid=74 rport=28720 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.560:4242159): pid=31889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31895 suid=74 rport=60472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.560:4242160): pid=31889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31895 suid=74 rport=60472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.566:4242161): pid=31891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31894 suid=74 rport=28681 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.566:4242162): pid=31891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31894 suid=74 rport=28681 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.570:4242163): pid=31890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31896 suid=74 rport=1615 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.570:4242164): pid=31890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31896 suid=74 rport=1615 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.578:4242165): pid=31893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31898 suid=74 rport=36961 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.578:4242166): pid=31893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31898 suid=74 rport=36961 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.612:4242167): pid=31899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31900 suid=74 rport=24744 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645069.612:4242168): pid=31899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=31900 suid=74 rport=24744 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=? res=success'
type=USER_AUTH msg=audit(1674645070.925:4242169): pid=31888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=179.111.216.5 addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645070.965:4242170): pid=31889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=179.111.216.5 addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645070.966:4242171): pid=31890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=179.111.216.5 addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645070.970:4242172): pid=31891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=179.111.216.5 addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645070.974:4242173): pid=31893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=179.111.216.5 addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645071.074:4242174): pid=31899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=179.111.216.5 addr=179.111.216.5 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674645072.135:4242175): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674645072.135:4242175): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f627d994010 items=0 ppid=31924 pid=31928 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645072.135:4242175): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674645072.141:4242176): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674645072.141:4242176): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcb7d63a010 items=0 ppid=31924 pid=31929 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645072.141:4242176): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674645072.146:4242177): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674645072.146:4242177): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4fcb4d1010 items=0 ppid=31924 pid=31930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645072.146:4242177): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674645072.151:4242178): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674645072.151:4242178): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fce1f879010 items=0 ppid=31924 pid=31931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645072.151:4242178): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=CRYPTO_KEY_USER msg=audit(1674645072.302:4242179): pid=31945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.302:4242180): pid=31945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.302:4242181): pid=31945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.316:4242182): pid=31942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.316:4242183): pid=31942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.316:4242184): pid=31942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31942 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.326:4242185): pid=31955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.326:4242186): pid=31955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.326:4242187): pid=31955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.356:4242188): pid=31965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.357:4242189): pid=31965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.357:4242190): pid=31965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31965 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.357:4242191): pid=31967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.357:4242192): pid=31967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.357:4242193): pid=31967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.360:4242194): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.360:4242195): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.360:4242196): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.361:4242197): pid=31963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.361:4242198): pid=31963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.361:4242199): pid=31963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.362:4242200): pid=31964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.362:4242201): pid=31964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.362:4242202): pid=31964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31964 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.371:4242203): pid=31974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.372:4242204): pid=31974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.372:4242205): pid=31974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.377:4242206): pid=31969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.377:4242207): pid=31969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.377:4242208): pid=31969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.378:4242209): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.378:4242210): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.378:4242211): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31973 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.380:4242212): pid=31971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.381:4242213): pid=31971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.381:4242214): pid=31971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31971 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.381:4242215): pid=31975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.382:4242216): pid=31975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.382:4242217): pid=31975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31975 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.384:4242218): pid=31978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.384:4242219): pid=31978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.384:4242220): pid=31978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.385:4242221): pid=31972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.385:4242222): pid=31972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.385:4242223): pid=31972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31972 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.387:4242224): pid=31980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.387:4242225): pid=31980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.387:4242226): pid=31980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.390:4242227): pid=31979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.390:4242228): pid=31979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.390:4242229): pid=31979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.391:4242230): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.391:4242231): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.391:4242232): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.393:4242233): pid=31977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.393:4242234): pid=31977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.393:4242235): pid=31977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31977 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.397:4242236): pid=31976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.397:4242237): pid=31976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.397:4242238): pid=31976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31976 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.399:4242239): pid=31981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.399:4242240): pid=31981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.399:4242241): pid=31981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.401:4242242): pid=31982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.401:4242243): pid=31982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645072.401:4242244): pid=31982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31982 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1674645072.541:4242245): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674645072.541:4242245): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc632ed1010 items=0 ppid=31924 pid=31984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645072.541:4242245): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730036382E3137382E3136372E3836002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645072.547:4242246): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674645072.547:4242246): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f74d179d010 items=0 ppid=31924 pid=31985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645072.547:4242246): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640036382E3137382E3136372E3836002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674645072.553:4242247): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674645072.553:4242247): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f81e7cb4010 items=0 ppid=31924 pid=31986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645072.553:4242247): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003137392E3131312E3231362E35002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645072.558:4242248): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674645072.558:4242248): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f61bb372010 items=0 ppid=31924 pid=31987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645072.558:4242248): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003137392E3131312E3231362E35002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674645073.247:4242249): pid=31899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645073.293:4242250): pid=31888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645073.333:4242251): pid=31890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645073.333:4242252): pid=31889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645073.338:4242253): pid=31891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645073.343:4242254): pid=31893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=179.111.216.5 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674645121.460:4242255): pid=32313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645121.460:4242256): pid=32313 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645121.462:4242257): pid=32313 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257654 res=1
type=USER_START msg=audit(1674645121.490:4242258): pid=32313 uid=0 auid=1055 ses=257654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645121.494:4242259): pid=32313 uid=0 auid=1055 ses=257654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645121.950:4242260): pid=32313 uid=0 auid=1055 ses=257654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645121.953:4242261): pid=32313 uid=0 auid=1055 ses=257654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674645180.505:4242262): avc: denied { read } for pid=32764 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674645180.505:4242262): avc: denied { open } for pid=32764 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645180.505:4242262): arch=c000003e syscall=2 success=yes exit=18 a0=55dd8fb80f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=32764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645180.505:4242262): proctitle="dovecot/auth"
type=AVC msg=audit(1674645180.505:4242263): avc: denied { getattr } for pid=32764 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645180.505:4242263): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd0284c0c0 a2=7ffd0284c0c0 a3=fffffc00 items=0 ppid=5547 pid=32764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645180.505:4242263): proctitle="dovecot/auth"
type=AVC msg=audit(1674645181.095:4242264): avc: denied { name_connect } for pid=32764 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674645181.095:4242264): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd0284beb0 a2=10 a3=7ffd0284beac items=0 ppid=5547 pid=32764 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645181.095:4242264): proctitle="dovecot/auth"
type=AVC msg=audit(1674645181.126:4242265): avc: denied { write } for pid=338 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674645181.126:4242265): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff53b96990 a2=6e a3=63d10ebd items=0 ppid=5547 pid=338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645181.126:4242265): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674645181.990:4242266): pid=362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645181.990:4242267): pid=362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645181.991:4242268): pid=362 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257655 res=1
type=USER_ACCT msg=audit(1674645181.995:4242269): pid=363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645181.995:4242270): pid=363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645181.996:4242271): pid=363 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257656 res=1
type=USER_START msg=audit(1674645182.032:4242273): pid=363 uid=0 auid=1055 ses=257656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674645182.031:4242272): pid=362 uid=0 auid=0 ses=257655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645182.033:4242274): pid=363 uid=0 auid=1055 ses=257656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645182.034:4242275): pid=362 uid=0 auid=0 ses=257655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645182.098:4242276): pid=362 uid=0 auid=0 ses=257655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645182.100:4242277): pid=362 uid=0 auid=0 ses=257655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645182.333:4242278): pid=363 uid=0 auid=1055 ses=257656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645182.336:4242279): pid=363 uid=0 auid=1055 ses=257656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645241.356:4242280): pid=930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645241.356:4242281): pid=930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645241.356:4242282): pid=930 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257657 res=1
type=USER_START msg=audit(1674645241.370:4242283): pid=930 uid=0 auid=1055 ses=257657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645241.372:4242284): pid=930 uid=0 auid=1055 ses=257657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645241.723:4242285): pid=930 uid=0 auid=1055 ses=257657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645241.726:4242286): pid=930 uid=0 auid=1055 ses=257657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645301.740:4242287): pid=1410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645301.740:4242288): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645301.741:4242289): pid=1410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645301.741:4242290): pid=1411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645301.741:4242291): pid=1411 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257658 res=1
type=LOGIN msg=audit(1674645301.741:4242292): pid=1410 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257659 res=1
type=USER_START msg=audit(1674645301.788:4242293): pid=1411 uid=0 auid=1055 ses=257658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645301.790:4242294): pid=1411 uid=0 auid=1055 ses=257658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674645301.791:4242295): pid=1410 uid=0 auid=0 ses=257659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645301.793:4242296): pid=1410 uid=0 auid=0 ses=257659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645302.364:4242297): pid=1411 uid=0 auid=1055 ses=257658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645302.380:4242298): pid=1411 uid=0 auid=1055 ses=257658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645305.309:4242299): pid=1410 uid=0 auid=0 ses=257659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645305.311:4242300): pid=1410 uid=0 auid=0 ses=257659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674645318.002:4242301): avc: denied { read } for pid=1555 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674645318.002:4242301): avc: denied { open } for pid=1555 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645318.002:4242301): arch=c000003e syscall=2 success=yes exit=18 a0=55bde817cf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=1555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645318.002:4242301): proctitle="dovecot/auth"
type=AVC msg=audit(1674645318.002:4242302): avc: denied { getattr } for pid=1555 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645318.002:4242302): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffef75202e0 a2=7ffef75202e0 a3=fffffc00 items=0 ppid=5547 pid=1555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645318.002:4242302): proctitle="dovecot/auth"
type=AVC msg=audit(1674645320.560:4242303): avc: denied { name_connect } for pid=1555 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674645320.560:4242303): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffef75200d0 a2=10 a3=7ffef75200cc items=0 ppid=5547 pid=1555 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645320.560:4242303): proctitle="dovecot/auth"
type=AVC msg=audit(1674645320.590:4242304): avc: denied { write } for pid=1580 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674645320.590:4242304): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc7da5fb80 a2=6e a3=63d10f48 items=0 ppid=5547 pid=1580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645320.590:4242304): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674645361.335:4242305): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645361.335:4242306): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645361.336:4242307): pid=1964 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257660 res=1
type=USER_START msg=audit(1674645361.362:4242308): pid=1964 uid=0 auid=1055 ses=257660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645361.364:4242309): pid=1964 uid=0 auid=1055 ses=257660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645361.676:4242310): pid=1964 uid=0 auid=1055 ses=257660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645361.678:4242311): pid=1964 uid=0 auid=1055 ses=257660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645421.705:4242312): pid=2426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645421.705:4242313): pid=2426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645421.705:4242314): pid=2426 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257661 res=1
type=USER_START msg=audit(1674645421.720:4242315): pid=2426 uid=0 auid=1055 ses=257661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645421.721:4242316): pid=2426 uid=0 auid=1055 ses=257661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645422.077:4242317): pid=2426 uid=0 auid=1055 ses=257661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645422.080:4242318): pid=2426 uid=0 auid=1055 ses=257661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645481.101:4242319): pid=2867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645481.101:4242320): pid=2867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645481.101:4242321): pid=2867 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257662 res=1
type=USER_START msg=audit(1674645481.116:4242322): pid=2867 uid=0 auid=1055 ses=257662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645481.119:4242323): pid=2867 uid=0 auid=1055 ses=257662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645481.435:4242324): pid=2867 uid=0 auid=1055 ses=257662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645481.440:4242325): pid=2867 uid=0 auid=1055 ses=257662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674645509.933:4242326): avc: denied { read } for pid=3127 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674645509.933:4242326): avc: denied { open } for pid=3127 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645509.933:4242326): arch=c000003e syscall=2 success=yes exit=18 a0=5625e1c27f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645509.933:4242326): proctitle="dovecot/auth"
type=AVC msg=audit(1674645509.934:4242327): avc: denied { getattr } for pid=3127 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645509.934:4242327): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffd68ed610 a2=7fffd68ed610 a3=fffffc00 items=0 ppid=5547 pid=3127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645509.934:4242327): proctitle="dovecot/auth"
type=AVC msg=audit(1674645510.526:4242328): avc: denied { name_connect } for pid=3127 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674645510.526:4242328): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fffd68ed400 a2=10 a3=7fffd68ed3fc items=0 ppid=5547 pid=3127 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645510.526:4242328): proctitle="dovecot/auth"
type=AVC msg=audit(1674645510.555:4242329): avc: denied { write } for pid=3160 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674645510.555:4242329): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd783d49a0 a2=6e a3=63d11006 items=0 ppid=5547 pid=3160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645510.555:4242329): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674645541.466:4242330): pid=3462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645541.466:4242331): pid=3462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645541.467:4242332): pid=3462 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257663 res=1
type=USER_START msg=audit(1674645541.488:4242333): pid=3462 uid=0 auid=1055 ses=257663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645541.490:4242334): pid=3462 uid=0 auid=1055 ses=257663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645541.877:4242335): pid=3462 uid=0 auid=1055 ses=257663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645541.880:4242336): pid=3462 uid=0 auid=1055 ses=257663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645601.907:4242337): pid=3927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645601.908:4242338): pid=3927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645601.908:4242339): pid=3927 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257664 res=1
type=USER_ACCT msg=audit(1674645601.918:4242340): pid=3925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645601.918:4242341): pid=3925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645601.918:4242342): pid=3928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645601.918:4242343): pid=3928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645601.918:4242344): pid=3925 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257665 res=1
type=LOGIN msg=audit(1674645601.918:4242345): pid=3928 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257666 res=1
type=USER_ACCT msg=audit(1674645601.928:4242346): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645601.929:4242347): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645601.929:4242348): pid=3926 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257667 res=1
type=USER_START msg=audit(1674645602.224:4242349): pid=3927 uid=0 auid=0 ses=257664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674645602.225:4242350): pid=3926 uid=0 auid=0 ses=257667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674645602.226:4242351): pid=3928 uid=0 auid=1055 ses=257666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645602.229:4242352): pid=3926 uid=0 auid=0 ses=257667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645602.230:4242353): pid=3927 uid=0 auid=0 ses=257664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645602.231:4242354): pid=3928 uid=0 auid=1055 ses=257666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674645602.232:4242355): pid=3925 uid=0 auid=0 ses=257665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645602.238:4242356): pid=3925 uid=0 auid=0 ses=257665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645602.381:4242357): pid=3927 uid=0 auid=0 ses=257664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645602.385:4242358): pid=3925 uid=0 auid=0 ses=257665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645602.388:4242359): pid=3927 uid=0 auid=0 ses=257664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645602.390:4242360): pid=3925 uid=0 auid=0 ses=257665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645602.760:4242361): pid=3928 uid=0 auid=1055 ses=257666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645602.763:4242362): pid=3928 uid=0 auid=1055 ses=257666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674645603.491:4242363): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674645603.491:4242363): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2afbcc2be010 items=0 ppid=1588 pid=3967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.491:4242363): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134332E3131342E3139342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A32303A3038002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.510:4242364): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674645603.510:4242364): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9b03c28010 items=0 ppid=1588 pid=3968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.510:4242364): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E32392E37302E35342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A32303A3233002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.520:4242365): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674645603.520:4242365): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b69c152c010 items=0 ppid=1588 pid=3969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.520:4242365): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003134342E3132332E3135312E35302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A32303A3332002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.525:4242366): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674645603.525:4242366): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ae80b21c010 items=0 ppid=1588 pid=3970 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.525:4242366): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132302E3133332E37302E342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A32373A3032002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.530:4242367): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674645603.530:4242367): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b57c1cfc010 items=0 ppid=1588 pid=3971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.530:4242367): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138352E3232352E37332E3133362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A33323A3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.535:4242368): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674645603.535:4242368): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b76410a6010 items=0 ppid=1588 pid=3972 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.535:4242368): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035382E3231302E31352E36372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A33393A3438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.540:4242369): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674645603.540:4242369): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0accc52010 items=0 ppid=1588 pid=3973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.540:4242369): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231392E3134352E36322E3130362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A34323A3430002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.545:4242370): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674645603.545:4242370): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ba1f49dc010 items=0 ppid=1588 pid=3974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.545:4242370): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134332E3131312E3136342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A34333A3032002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.550:4242371): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674645603.550:4242371): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b208af3b010 items=0 ppid=1588 pid=3975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.550:4242371): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E3233332E3139342E34352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A34343A3533002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.555:4242372): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674645603.555:4242372): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b14d19fe010 items=0 ppid=1588 pid=3976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.555:4242372): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3139322E3231332E3132342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431303A35363A3030002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.560:4242373): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674645603.560:4242373): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b21755bd010 items=0 ppid=1588 pid=3977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.560:4242373): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131362E3233342E36302E35332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A30353A3135002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.565:4242374): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674645603.565:4242374): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b98d7792010 items=0 ppid=1588 pid=3978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.565:4242374): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730034302E37332E3130312E3138372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A30353A3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.570:4242375): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674645603.570:4242375): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9c4ba26010 items=0 ppid=1588 pid=3979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.570:4242375): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E39322E3132372E3235332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A31333A3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674645603.576:4242376): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674645603.576:4242376): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b966c5c0010 items=0 ppid=1588 pid=3980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645603.576:4242376): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132302E3230392E3233302E3136342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A31383A3335002D6A0044524F50
type=CRED_DISP msg=audit(1674645605.805:4242377): pid=3926 uid=0 auid=0 ses=257667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645605.807:4242378): pid=3926 uid=0 auid=0 ses=257667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645661.831:4242379): pid=4446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645661.832:4242380): pid=4446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645661.833:4242381): pid=4446 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257668 res=1
type=USER_START msg=audit(1674645661.856:4242382): pid=4446 uid=0 auid=1055 ses=257668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645661.860:4242383): pid=4446 uid=0 auid=1055 ses=257668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645662.240:4242384): pid=4446 uid=0 auid=1055 ses=257668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645662.243:4242385): pid=4446 uid=0 auid=1055 ses=257668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645665.103:4242386): pid=4481 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.103:4242387): pid=4481 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.103:4242388): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.124:4242389): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.128:4242390): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.128:4242391): pid=4481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.149:4242392): pid=4485 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.149:4242393): pid=4485 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.150:4242394): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.166:4242395): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.169:4242396): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.169:4242397): pid=4485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.193:4242398): pid=4493 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.193:4242399): pid=4493 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.194:4242400): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.211:4242401): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.215:4242402): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.215:4242403): pid=4493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.346:4242404): pid=4499 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.347:4242405): pid=4499 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.347:4242406): pid=4499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.361:4242407): pid=4499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.364:4242408): pid=4499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.364:4242409): pid=4499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.391:4242410): pid=4502 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.392:4242411): pid=4502 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.392:4242412): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.410:4242413): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.414:4242414): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.414:4242415): pid=4502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.441:4242416): pid=4508 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.441:4242417): pid=4508 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.441:4242418): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.457:4242419): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.459:4242420): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.459:4242421): pid=4508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.490:4242422): pid=4513 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.490:4242423): pid=4513 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.490:4242424): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.506:4242425): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.509:4242426): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.509:4242427): pid=4513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.531:4242428): pid=4516 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.531:4242429): pid=4516 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.531:4242430): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.546:4242431): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.550:4242432): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.550:4242433): pid=4516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.575:4242434): pid=4520 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.575:4242435): pid=4520 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.575:4242436): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.592:4242437): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.596:4242438): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.596:4242439): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.624:4242440): pid=4526 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.625:4242441): pid=4526 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.625:4242442): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.644:4242443): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.647:4242444): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.647:4242445): pid=4526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645665.676:4242446): pid=4532 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645665.677:4242447): pid=4532 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645665.677:4242448): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645665.699:4242449): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645665.703:4242450): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645665.703:4242451): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645667.764:4242452): pid=4554 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645667.764:4242453): pid=4554 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645667.764:4242454): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645667.778:4242455): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645667.834:4242456): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645667.834:4242457): pid=4554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645667.868:4242458): pid=4560 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645667.868:4242459): pid=4560 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645667.868:4242460): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645667.886:4242461): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645667.968:4242462): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645667.968:4242463): pid=4560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645667.993:4242464): pid=4566 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645667.993:4242465): pid=4566 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F75736572735F66656174757265735F73657474696E677320757365722D313D706D637265736F757263657320757365722D323D76666D61737365747320757365722D333D7368616C696E696A616D657320757365722D343D7777777465737475676F20757365722D353D7777776B6170696E20757365722D363D776F6F647065636B20757365722D373D72656D797361677220757365722D383D646973706F7365617420757365722D393D7777776B6D616F726720757365722D31303D6D7273636C65616E20757365722D31313D7777776E6578696469676974616C20757365722D31323D70616C636F31323320757365722D31333D6769667465726D616E20757365722D31343D70686D6574616C7320757365722D31353D6B6F74746179616D63616C6C6472697620757365722D31363D7777776C6574737374616C6B666F6F6420757365722D31373D7374726169676874637572766520757365722D31383D626F6E696661636567726F757020757365722D31393D77777765766D686F6E646120757365722D32303D6C61756E647279626F6E696661636520757365722D32313D61327A67726F757020757365722D32323D6461727473696D7020757365722D32333D636F6368696E7461786920757365722D32343D7777776B61726574616B65727320757365722D32353D6B6572616C61686F6C6920757365722D32363D7777777265736F7572636568756E746520757365722D32373D777777726D73776C6C20757365722D32383D75676F7473636F6D20757365722D32393D74726176656C626F6E696661636520757365722D33303D777777706D637265736F7572636520666561747572652D313D66696C656D616E6167657220666561747572652D323D6261636B757020666561747572652D333D63726F6E20666561747572652D343D7068706D7961646D696E20666561747572652D353D6D7973716C20666561747572652D363D6D756C746970687020666561747572652D373D6164646F6E646F6D61696E7320666561747572652D383D737562646F6D61696E7320666561747572652D393D77656270726F7465637420666561747572652D31303D73736C696E7374616C6C20666561747572652D31313D77702D746F6F6C6B697420666561747572652D31323D77702D746F6F6C6B69742D64656C757865202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645667.994:4242466): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645668.011:4242467): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645668.161:4242468): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645668.162:4242469): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645668.223:4242470): pid=4573 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645668.224:4242471): pid=4573 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674645668.225:4242472): pid=4573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645668.243:4242473): pid=4573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645668.248:4242474): pid=4573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645668.248:4242475): pid=4573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645668.286:4242476): pid=4578 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645668.286:4242477): pid=4578 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D32416B6A39654F447357594F5167416A2E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674645668.287:4242478): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645668.301:4242479): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645668.304:4242480): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645668.304:4242481): pid=4578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645668.330:4242482): pid=4583 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645668.330:4242483): pid=4583 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D32416B6A39654F447357594F5167416A2E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674645668.330:4242484): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645668.344:4242485): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645668.351:4242486): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645668.352:4242487): pid=4583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645668.377:4242488): pid=4587 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645668.378:4242489): pid=4587 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D32416B6A39654F447357594F5167416A2E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674645668.378:4242490): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645668.393:4242491): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645668.398:4242492): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645668.398:4242493): pid=4587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645668.422:4242494): pid=4594 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645668.422:4242495): pid=4594 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674645668.422:4242496): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645668.435:4242497): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645668.441:4242498): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645668.441:4242499): pid=4594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645668.816:4242500): pid=4605 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645668.816:4242501): pid=4605 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674645668.816:4242502): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645668.830:4242503): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645668.833:4242504): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645668.833:4242505): pid=4605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645669.261:4242506): pid=4612 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645669.261:4242507): pid=4612 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674645669.261:4242508): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645669.277:4242509): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645669.280:4242510): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645669.280:4242511): pid=4612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645669.301:4242512): pid=4615 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645669.301:4242513): pid=4615 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674645669.301:4242514): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645669.316:4242515): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645669.320:4242516): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645669.320:4242517): pid=4615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645669.346:4242518): pid=4622 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645669.346:4242519): pid=4622 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674645669.347:4242520): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645669.362:4242521): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645669.365:4242522): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645669.365:4242523): pid=4622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645669.394:4242524): pid=4626 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645669.394:4242525): pid=4626 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645669.394:4242526): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645669.410:4242527): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645669.542:4242528): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645669.543:4242529): pid=4626 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645670.336:4242530): pid=4638 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645670.336:4242531): pid=4638 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645670.336:4242532): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645670.353:4242533): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645670.408:4242534): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645670.408:4242535): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645670.439:4242536): pid=4644 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645670.439:4242537): pid=4644 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674645670.439:4242538): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645670.455:4242539): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645671.642:4242540): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645671.642:4242541): pid=4644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645671.863:4242542): pid=4659 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645671.863:4242543): pid=4659 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674645671.863:4242544): pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645671.886:4242545): pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645673.212:4242546): pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645673.212:4242547): pid=4659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645673.471:4242548): pid=4680 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645673.471:4242549): pid=4680 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674645673.471:4242550): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645673.486:4242551): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645675.175:4242552): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645675.175:4242553): pid=4680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645675.446:4242554): pid=4701 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645675.446:4242555): pid=4701 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674645675.446:4242556): pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645675.462:4242557): pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645676.636:4242558): pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645676.636:4242559): pid=4701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645676.755:4242560): pid=4717 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645676.755:4242561): pid=4717 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F74742026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F7474202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645676.755:4242562): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645676.781:4242563): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645677.258:4242564): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645677.258:4242565): pid=4717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645677.377:4242566): pid=4733 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645677.377:4242567): pid=4733 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674645677.378:4242568): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645677.393:4242569): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645679.540:4242570): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645679.540:4242571): pid=4733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645679.822:4242572): pid=4761 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645679.822:4242573): pid=4761 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674645679.822:4242574): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645679.842:4242575): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645680.986:4242576): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645680.986:4242577): pid=4761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645681.187:4242578): pid=4778 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645681.187:4242579): pid=4778 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674645681.187:4242580): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645681.202:4242581): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645682.327:4242582): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645682.327:4242583): pid=4778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645683.238:4242584): pid=4803 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674645683.239:4242585): pid=4803 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674645683.239:4242586): pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674645683.256:4242587): pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674645684.395:4242588): pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674645684.395:4242589): pid=4803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674645721.263:4242590): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645721.263:4242591): pid=5113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645721.264:4242592): pid=5113 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257669 res=1
type=USER_START msg=audit(1674645721.277:4242593): pid=5113 uid=0 auid=1055 ses=257669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645721.279:4242594): pid=5113 uid=0 auid=1055 ses=257669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645721.569:4242595): pid=5113 uid=0 auid=1055 ses=257669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645721.570:4242596): pid=5113 uid=0 auid=1055 ses=257669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674645723.884:4242597): avc: denied { read } for pid=5143 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674645723.884:4242597): avc: denied { open } for pid=5143 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645723.884:4242597): arch=c000003e syscall=2 success=yes exit=18 a0=555d22d87f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=5143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645723.884:4242597): proctitle="dovecot/auth"
type=AVC msg=audit(1674645723.884:4242598): avc: denied { getattr } for pid=5143 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645723.884:4242598): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc696daea0 a2=7ffc696daea0 a3=fffffc00 items=0 ppid=5547 pid=5143 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645723.884:4242598): proctitle="dovecot/auth"
type=AVC msg=audit(1674645724.845:4242599): avc: denied { name_connect } for pid=5143 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674645724.845:4242599): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc696dac90 a2=10 a3=7ffc696dac8c items=0 ppid=5547 pid=5143 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645724.845:4242599): proctitle="dovecot/auth"
type=AVC msg=audit(1674645724.872:4242600): avc: denied { write } for pid=5152 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674645724.872:4242600): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc688c6140 a2=6e a3=63d110dc items=0 ppid=5547 pid=5152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645724.872:4242600): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674645725.424:4242601): avc: denied { read append } for pid=5161 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674645725.424:4242601): avc: denied { open } for pid=5161 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645725.424:4242601): arch=c000003e syscall=2 success=yes exit=8 a0=55e3d568ba60 a1=402 a2=7ffeddd47670 a3=7ffeddd470e0 items=0 ppid=5547 pid=5161 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645725.424:4242601): proctitle="dovecot/imap"
type=AVC msg=audit(1674645725.425:4242602): avc: denied { getattr } for pid=5161 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645725.425:4242602): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffeddd475d0 a2=7ffeddd475d0 a3=7ffeddd47020 items=0 ppid=5547 pid=5161 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645725.425:4242602): proctitle="dovecot/imap"
type=AVC msg=audit(1674645725.425:4242603): avc: denied { write } for pid=5161 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645725.425:4242603): arch=c000003e syscall=2 success=yes exit=10 a0=55e3d5690960 a1=2 a2=7ffeddd47370 a3=7ffeddd46e20 items=0 ppid=5547 pid=5161 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645725.425:4242603): proctitle="dovecot/imap"
type=AVC msg=audit(1674645725.425:4242604): avc: denied { lock } for pid=5161 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645725.425:4242604): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffeddd47270 a3=63d110dd items=0 ppid=5547 pid=5161 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645725.425:4242604): proctitle="dovecot/imap"
type=AVC msg=audit(1674645725.425:4242605): avc: denied { read } for pid=5161 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674645725.425:4242605): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55e3d56b92f8 a2=90800 a3=0 items=0 ppid=5547 pid=5161 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645725.425:4242605): proctitle="dovecot/imap"
type=AVC msg=audit(1674645725.426:4242606): avc: denied { getattr } for pid=5161 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674645725.426:4242606): arch=c000003e syscall=4 success=yes exit=0 a0=55e3d567ba60 a1=7ffeddd47620 a2=7ffeddd47620 a3=6f632e6f72676173 items=0 ppid=5547 pid=5161 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645725.426:4242606): proctitle="dovecot/imap"
type=AVC msg=audit(1674645728.837:4242607): avc: denied { write } for pid=5194 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674645728.837:4242607): arch=c000003e syscall=21 success=yes exit=0 a0=55e110d924c0 a1=2 a2=7b48 a3=7ffd8467fb60 items=0 ppid=5547 pid=5194 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645728.837:4242607): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674645770.024:4242608): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645770.024:4242609): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645770.025:4242610): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5514 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645770.189:4242611): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=5514 suid=74 rport=32945 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=83.39.54.53 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645770.189:4242612): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=5514 suid=74 rport=32945 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=83.39.54.53 terminal=? res=success'
type=USER_AUTH msg=audit(1674645771.082:4242613): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=83.39.54.53 addr=83.39.54.53 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645773.352:4242614): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=83.39.54.53 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645773.693:4242615): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=83.39.54.53 addr=83.39.54.53 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645775.905:4242616): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=83.39.54.53 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674645776.245:4242617): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=83.39.54.53 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674645776.436:4242618): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5514 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645776.436:4242619): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5514 suid=74 rport=32945 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=83.39.54.53 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645776.438:4242620): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645776.438:4242621): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645776.438:4242622): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5513 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674645776.438:4242623): pid=5513 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=83.39.54.53 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674645781.691:4242624): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645781.691:4242625): pid=5621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645781.691:4242626): pid=5621 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257670 res=1
type=USER_START msg=audit(1674645781.713:4242627): pid=5621 uid=0 auid=1055 ses=257670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645781.725:4242628): pid=5621 uid=0 auid=1055 ses=257670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645782.109:4242629): pid=5621 uid=0 auid=1055 ses=257670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645782.113:4242630): pid=5621 uid=0 auid=1055 ses=257670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674645784.361:4242631): avc: denied { name_connect } for pid=5143 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674645784.361:4242631): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffc696dac90 a2=10 a3=7ffc696dac8c items=0 ppid=5547 pid=5143 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645784.361:4242631): proctitle="dovecot/auth"
type=AVC msg=audit(1674645784.373:4242632): avc: denied { write } for pid=5152 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674645784.373:4242632): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc688c6140 a2=6e a3=63d11118 items=0 ppid=5547 pid=5152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645784.373:4242632): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674645841.134:4242633): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645841.134:4242634): pid=6084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645841.135:4242635): pid=6084 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257671 res=1
type=USER_START msg=audit(1674645841.153:4242636): pid=6084 uid=0 auid=1055 ses=257671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645841.155:4242637): pid=6084 uid=0 auid=1055 ses=257671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645841.501:4242638): pid=6084 uid=0 auid=1055 ses=257671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645841.503:4242639): pid=6084 uid=0 auid=1055 ses=257671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645901.538:4242640): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645901.538:4242641): pid=6577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645901.538:4242642): pid=6577 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257672 res=1
type=USER_ACCT msg=audit(1674645901.541:4242643): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645901.541:4242644): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645901.542:4242645): pid=6576 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257673 res=1
type=USER_START msg=audit(1674645901.635:4242646): pid=6577 uid=0 auid=1055 ses=257672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645901.637:4242647): pid=6577 uid=0 auid=1055 ses=257672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674645901.642:4242648): pid=6576 uid=0 auid=0 ses=257673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645901.661:4242649): pid=6576 uid=0 auid=0 ses=257673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645902.154:4242650): pid=6577 uid=0 auid=1055 ses=257672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645902.164:4242651): pid=6577 uid=0 auid=1055 ses=257672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645905.338:4242652): pid=6576 uid=0 auid=0 ses=257673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645905.340:4242653): pid=6576 uid=0 auid=0 ses=257673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674645961.357:4242654): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674645961.357:4242655): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674645961.359:4242656): pid=6963 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257674 res=1
type=USER_START msg=audit(1674645961.378:4242657): pid=6963 uid=0 auid=1055 ses=257674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674645961.380:4242658): pid=6963 uid=0 auid=1055 ses=257674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674645961.659:4242659): pid=6963 uid=0 auid=1055 ses=257674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674645961.661:4242660): pid=6963 uid=0 auid=1055 ses=257674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674645962.484:4242661): avc: denied { name_connect } for pid=5143 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674645962.484:4242661): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc696dac90 a2=10 a3=7ffc696dac8c items=0 ppid=5547 pid=5143 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645962.484:4242661): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674645963.580:4242662): table=filter family=2 entries=1024
type=SYSCALL msg=audit(1674645963.580:4242662): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b873f544010 items=0 ppid=6986 pid=6991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645963.580:4242662): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003135332E3130312E34312E323236002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674645970.689:4242663): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645970.689:4242664): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645970.689:4242665): pid=7037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645971.061:4242666): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=7037 suid=74 rport=35920 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674645971.062:4242667): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=7037 suid=74 rport=35920 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=? res=success'
type=USER_AUTH msg=audit(1674645971.776:4242668): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=205.185.113.129 addr=205.185.113.129 terminal=ssh res=failed'
type=AVC msg=audit(1674645972.243:4242669): avc: denied { write } for pid=7056 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674645972.243:4242669): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc8d017410 a2=6e a3=63d111d4 items=0 ppid=5547 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645972.243:4242669): proctitle=646F7665636F742F61757468002D77
type=USER_AUTH msg=audit(1674645973.838:4242670): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674645974.140:4242671): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7037 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645974.140:4242672): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7037 suid=74 rport=35920 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645974.142:4242673): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645974.142:4242674): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674645974.142:4242675): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7036 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674645974.142:4242676): pid=7036 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674645979.172:4242677): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674645979.172:4242677): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2ea4ecd010 items=0 ppid=7121 pid=7126 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674645979.172:4242677): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138322E39302E3232342E3939002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674646000.151:4242678): avc: denied { write } for pid=7056 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674646000.151:4242678): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc8d017410 a2=6e a3=63d111f0 items=0 ppid=5547 pid=7056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646000.151:4242678): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674646021.678:4242679): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646021.678:4242680): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646021.678:4242681): pid=7471 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257675 res=1
type=USER_START msg=audit(1674646021.697:4242682): pid=7471 uid=0 auid=1055 ses=257675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646021.698:4242683): pid=7471 uid=0 auid=1055 ses=257675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646022.024:4242684): pid=7471 uid=0 auid=1055 ses=257675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646022.028:4242685): pid=7471 uid=0 auid=1055 ses=257675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646081.041:4242686): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646081.041:4242687): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646081.041:4242688): pid=7918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646081.041:4242689): pid=7919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646081.041:4242690): pid=7918 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257676 res=1
type=LOGIN msg=audit(1674646081.041:4242691): pid=7919 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257677 res=1
type=USER_START msg=audit(1674646081.071:4242692): pid=7918 uid=0 auid=0 ses=257676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646081.071:4242693): pid=7919 uid=0 auid=1055 ses=257677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646081.074:4242694): pid=7918 uid=0 auid=0 ses=257676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646081.074:4242695): pid=7919 uid=0 auid=1055 ses=257677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646081.119:4242696): pid=7918 uid=0 auid=0 ses=257676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646081.121:4242697): pid=7918 uid=0 auid=0 ses=257676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646081.335:4242698): pid=7919 uid=0 auid=1055 ses=257677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646081.337:4242699): pid=7919 uid=0 auid=1055 ses=257677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646112.271:4242700): avc: denied { read } for pid=8162 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674646112.271:4242700): avc: denied { open } for pid=8162 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646112.271:4242700): arch=c000003e syscall=2 success=yes exit=18 a0=564cde28bf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=8162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646112.271:4242700): proctitle="dovecot/auth"
type=AVC msg=audit(1674646112.271:4242701): avc: denied { getattr } for pid=8162 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646112.271:4242701): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc28479860 a2=7ffc28479860 a3=fffffc00 items=0 ppid=5547 pid=8162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646112.271:4242701): proctitle="dovecot/auth"
type=AVC msg=audit(1674646113.915:4242702): avc: denied { name_connect } for pid=8162 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674646113.915:4242702): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc28479650 a2=10 a3=7ffc2847964c items=0 ppid=5547 pid=8162 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646113.915:4242702): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674646141.371:4242703): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646141.371:4242704): pid=8360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646141.373:4242705): pid=8360 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257678 res=1
type=USER_START msg=audit(1674646141.415:4242706): pid=8360 uid=0 auid=1055 ses=257678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646141.416:4242707): pid=8360 uid=0 auid=1055 ses=257678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646141.787:4242708): pid=8360 uid=0 auid=1055 ses=257678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646141.788:4242709): pid=8360 uid=0 auid=1055 ses=257678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646201.821:4242710): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646201.822:4242711): pid=8764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646201.822:4242712): pid=8764 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257679 res=1
type=USER_ACCT msg=audit(1674646201.824:4242713): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646201.824:4242714): pid=8763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646201.824:4242715): pid=8763 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257680 res=1
type=USER_ACCT msg=audit(1674646201.827:4242716): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646201.828:4242717): pid=8765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646201.828:4242718): pid=8765 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257681 res=1
type=USER_START msg=audit(1674646201.926:4242719): pid=8763 uid=0 auid=0 ses=257680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646201.926:4242720): pid=8764 uid=0 auid=0 ses=257679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646201.934:4242721): pid=8763 uid=0 auid=0 ses=257680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646201.934:4242722): pid=8764 uid=0 auid=0 ses=257679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646201.940:4242723): pid=8765 uid=0 auid=1055 ses=257681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646201.944:4242724): pid=8765 uid=0 auid=1055 ses=257681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646201.975:4242725): pid=8763 uid=0 auid=0 ses=257680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646201.979:4242726): pid=8763 uid=0 auid=0 ses=257680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646202.343:4242727): pid=8765 uid=0 auid=1055 ses=257681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646202.381:4242728): pid=8765 uid=0 auid=1055 ses=257681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646205.260:4242729): avc: denied { read } for pid=8827 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674646205.260:4242729): avc: denied { open } for pid=8827 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646205.260:4242729): arch=c000003e syscall=2 success=yes exit=18 a0=55dd45d12f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=8827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646205.260:4242729): proctitle="dovecot/auth"
type=AVC msg=audit(1674646205.260:4242730): avc: denied { getattr } for pid=8827 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646205.260:4242730): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcf98f77d0 a2=7ffcf98f77d0 a3=fffffc00 items=0 ppid=5547 pid=8827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646205.260:4242730): proctitle="dovecot/auth"
type=CRED_DISP msg=audit(1674646205.396:4242731): pid=8764 uid=0 auid=0 ses=257679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646205.400:4242732): pid=8764 uid=0 auid=0 ses=257679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646205.968:4242733): avc: denied { name_connect } for pid=8827 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674646205.968:4242733): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcf98f75c0 a2=10 a3=7ffcf98f75bc items=0 ppid=5547 pid=8827 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646205.968:4242733): proctitle="dovecot/auth"
type=AVC msg=audit(1674646206.005:4242734): avc: denied { write } for pid=8863 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674646206.005:4242734): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff7aea9570 a2=6e a3=63d112be items=0 ppid=5547 pid=8863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646206.005:4242734): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674646261.423:4242735): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646261.423:4242736): pid=9299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646261.424:4242737): pid=9299 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257682 res=1
type=USER_START msg=audit(1674646261.443:4242738): pid=9299 uid=0 auid=1055 ses=257682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646261.445:4242739): pid=9299 uid=0 auid=1055 ses=257682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646261.802:4242740): pid=9299 uid=0 auid=1055 ses=257682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646261.805:4242741): pid=9299 uid=0 auid=1055 ses=257682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646266.918:4242742): avc: denied { write } for pid=8863 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674646266.918:4242742): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff7aea9570 a2=6e a3=63d112fa items=0 ppid=5547 pid=8863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646266.918:4242742): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674646321.828:4242743): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646321.829:4242744): pid=9792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646321.829:4242745): pid=9792 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257683 res=1
type=USER_START msg=audit(1674646321.847:4242746): pid=9792 uid=0 auid=1055 ses=257683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646321.850:4242747): pid=9792 uid=0 auid=1055 ses=257683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646322.285:4242748): pid=9792 uid=0 auid=1055 ses=257683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646322.287:4242749): pid=9792 uid=0 auid=1055 ses=257683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646375.138:4242750): avc: denied { read } for pid=10203 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674646375.138:4242750): avc: denied { open } for pid=10203 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646375.138:4242750): arch=c000003e syscall=2 success=yes exit=18 a0=557fe8e7bf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=10203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646375.138:4242750): proctitle="dovecot/auth"
type=AVC msg=audit(1674646375.138:4242751): avc: denied { getattr } for pid=10203 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646375.138:4242751): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd6ceade50 a2=7ffd6ceade50 a3=fffffc00 items=0 ppid=5547 pid=10203 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646375.138:4242751): proctitle="dovecot/auth"
type=AVC msg=audit(1674646379.215:4242752): avc: denied { name_connect } for pid=10203 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674646379.215:4242752): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd6ceadc40 a2=10 a3=7ffd6ceadc3c items=0 ppid=5547 pid=10203 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646379.215:4242752): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674646381.303:4242753): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646381.303:4242754): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646381.304:4242755): pid=10247 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257684 res=1
type=USER_START msg=audit(1674646381.319:4242756): pid=10247 uid=0 auid=1055 ses=257684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646381.320:4242757): pid=10247 uid=0 auid=1055 ses=257684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646381.616:4242758): pid=10247 uid=0 auid=1055 ses=257684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646381.618:4242759): pid=10247 uid=0 auid=1055 ses=257684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646441.633:4242760): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646441.633:4242761): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646441.633:4242762): pid=10672 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257685 res=1
type=USER_START msg=audit(1674646441.647:4242763): pid=10672 uid=0 auid=1055 ses=257685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646441.649:4242764): pid=10672 uid=0 auid=1055 ses=257685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646441.995:4242765): pid=10672 uid=0 auid=1055 ses=257685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646441.996:4242766): pid=10672 uid=0 auid=1055 ses=257685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646502.015:4242767): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646502.015:4242768): pid=11061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646502.015:4242769): pid=11061 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257686 res=1
type=USER_ACCT msg=audit(1674646502.018:4242770): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646502.019:4242771): pid=11064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646502.019:4242772): pid=11064 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257687 res=1
type=USER_ACCT msg=audit(1674646502.023:4242773): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646502.023:4242774): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646502.023:4242775): pid=11062 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257688 res=1
type=USER_ACCT msg=audit(1674646502.023:4242776): pid=11063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646502.023:4242777): pid=11063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646502.023:4242778): pid=11063 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257689 res=1
type=USER_START msg=audit(1674646502.139:4242779): pid=11064 uid=0 auid=1055 ses=257687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646502.139:4242780): pid=11061 uid=0 auid=0 ses=257686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646502.144:4242781): pid=11064 uid=0 auid=1055 ses=257687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646502.145:4242782): pid=11061 uid=0 auid=0 ses=257686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646502.146:4242783): pid=11063 uid=0 auid=0 ses=257689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646502.147:4242784): pid=11062 uid=0 auid=0 ses=257688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646502.147:4242785): pid=11063 uid=0 auid=0 ses=257689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646502.162:4242786): pid=11062 uid=0 auid=0 ses=257688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646502.411:4242787): pid=11062 uid=0 auid=0 ses=257688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646502.441:4242788): pid=11062 uid=0 auid=0 ses=257688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646502.530:4242789): pid=11063 uid=0 auid=0 ses=257689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646502.542:4242790): pid=11063 uid=0 auid=0 ses=257689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646502.690:4242791): pid=11064 uid=0 auid=1055 ses=257687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646502.695:4242792): pid=11064 uid=0 auid=1055 ses=257687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646505.814:4242793): pid=11061 uid=0 auid=0 ses=257686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646505.816:4242794): pid=11061 uid=0 auid=0 ses=257686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646537.776:4242795): avc: denied { read } for pid=11357 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674646537.776:4242795): avc: denied { open } for pid=11357 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646537.776:4242795): arch=c000003e syscall=2 success=yes exit=18 a0=563cf26a1f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=11357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646537.776:4242795): proctitle="dovecot/auth"
type=AVC msg=audit(1674646537.776:4242796): avc: denied { getattr } for pid=11357 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646537.776:4242796): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd9a187060 a2=7ffd9a187060 a3=fffffc00 items=0 ppid=5547 pid=11357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646537.776:4242796): proctitle="dovecot/auth"
type=AVC msg=audit(1674646538.319:4242797): avc: denied { name_connect } for pid=11357 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674646538.319:4242797): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd9a186e50 a2=10 a3=7ffd9a186e4c items=0 ppid=5547 pid=11357 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646538.319:4242797): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674646561.846:4242798): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646561.846:4242799): pid=11576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646561.847:4242800): pid=11576 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257690 res=1
type=USER_START msg=audit(1674646561.875:4242801): pid=11576 uid=0 auid=1055 ses=257690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646561.878:4242802): pid=11576 uid=0 auid=1055 ses=257690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646562.228:4242803): pid=11576 uid=0 auid=1055 ses=257690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646562.231:4242804): pid=11576 uid=0 auid=1055 ses=257690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646621.262:4242805): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646621.262:4242806): pid=12062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646621.263:4242807): pid=12062 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257691 res=1
type=USER_START msg=audit(1674646621.277:4242808): pid=12062 uid=0 auid=1055 ses=257691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646621.279:4242809): pid=12062 uid=0 auid=1055 ses=257691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646621.633:4242810): pid=12062 uid=0 auid=1055 ses=257691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646621.635:4242811): pid=12062 uid=0 auid=1055 ses=257691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646671.094:4242812): avc: denied { name_connect } for pid=12417 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674646671.094:4242812): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcb3e0a7b0 a2=10 a3=7ffcb3e0a7ac items=0 ppid=5547 pid=12417 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646671.094:4242812): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674646671.286:4242813): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646671.287:4242814): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646671.287:4242815): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646671.495:4242816): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=12467 suid=74 rport=52493 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646671.495:4242817): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=12467 suid=74 rport=52493 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=? res=success'
type=NETFILTER_CFG msg=audit(1674646672.185:4242818): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674646672.185:4242818): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2adc352c7010 items=0 ppid=12476 pid=12482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646672.185:4242818): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F7572636500312E37312E3234392E323130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543131
type=USER_AUTH msg=audit(1674646672.401:4242819): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=209.141.55.27 addr=209.141.55.27 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674646674.363:4242820): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674646674.576:4242821): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12467 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646674.576:4242822): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12467 suid=74 rport=52493 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646674.578:4242823): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646674.578:4242824): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646674.578:4242825): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12465 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674646674.578:4242826): pid=12465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674646681.651:4242827): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646681.651:4242828): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646681.653:4242829): pid=12552 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257692 res=1
type=USER_START msg=audit(1674646681.670:4242830): pid=12552 uid=0 auid=1055 ses=257692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646681.672:4242831): pid=12552 uid=0 auid=1055 ses=257692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646681.997:4242832): pid=12552 uid=0 auid=1055 ses=257692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646681.999:4242833): pid=12552 uid=0 auid=1055 ses=257692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646687.042:4242834): avc: denied { write } for pid=12603 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674646687.042:4242834): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc0db950f0 a2=6e a3=63d1149f items=0 ppid=5547 pid=12603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646687.042:4242834): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674646741.014:4242836): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646741.014:4242835): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646741.015:4242837): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646741.015:4242838): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646741.015:4242839): pid=13030 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257693 res=1
type=LOGIN msg=audit(1674646741.015:4242840): pid=13029 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257694 res=1
type=USER_START msg=audit(1674646741.051:4242841): pid=13030 uid=0 auid=1055 ses=257693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646741.052:4242842): pid=13029 uid=0 auid=0 ses=257694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646741.053:4242843): pid=13030 uid=0 auid=1055 ses=257693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646741.053:4242844): pid=13029 uid=0 auid=0 ses=257694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646741.358:4242845): pid=13030 uid=0 auid=1055 ses=257693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646741.374:4242846): pid=13030 uid=0 auid=1055 ses=257693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646742.468:4242847): pid=13029 uid=0 auid=0 ses=257694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646742.471:4242848): pid=13029 uid=0 auid=0 ses=257694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674646747.516:4242849): pid=13090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646747.517:4242850): pid=13090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646747.517:4242851): pid=13090 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13090 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674646782.460:4242852): avc: denied { read } for pid=13348 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674646782.460:4242852): avc: denied { open } for pid=13348 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646782.460:4242852): arch=c000003e syscall=2 success=yes exit=18 a0=5568f7bf0f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=13348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646782.460:4242852): proctitle="dovecot/auth"
type=AVC msg=audit(1674646782.461:4242853): avc: denied { getattr } for pid=13348 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646782.461:4242853): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffea8de3be0 a2=7ffea8de3be0 a3=fffffc00 items=0 ppid=5547 pid=13348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646782.461:4242853): proctitle="dovecot/auth"
type=AVC msg=audit(1674646783.922:4242854): avc: denied { name_connect } for pid=13348 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674646783.922:4242854): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffea8de39d0 a2=10 a3=7ffea8de39cc items=0 ppid=5547 pid=13348 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646783.922:4242854): proctitle="dovecot/auth"
type=AVC msg=audit(1674646783.954:4242855): avc: denied { write } for pid=13355 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674646783.954:4242855): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd5f9cc030 a2=6e a3=63d114ff items=0 ppid=5547 pid=13355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646783.954:4242855): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674646793.389:4242856): avc: denied { read append } for pid=13415 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674646793.389:4242856): avc: denied { open } for pid=13415 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646793.389:4242856): arch=c000003e syscall=2 success=yes exit=8 a0=55ab23c7ba60 a1=402 a2=7ffd9b485cf0 a3=7ffd9b485760 items=0 ppid=5547 pid=13415 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646793.389:4242856): proctitle="dovecot/imap"
type=AVC msg=audit(1674646793.389:4242857): avc: denied { getattr } for pid=13415 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646793.389:4242857): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffd9b485c50 a2=7ffd9b485c50 a3=7ffd9b4856a0 items=0 ppid=5547 pid=13415 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646793.389:4242857): proctitle="dovecot/imap"
type=AVC msg=audit(1674646793.389:4242858): avc: denied { write } for pid=13415 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646793.389:4242858): arch=c000003e syscall=2 success=yes exit=10 a0=55ab23c80960 a1=2 a2=7ffd9b4859f0 a3=7ffd9b4854a0 items=0 ppid=5547 pid=13415 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646793.389:4242858): proctitle="dovecot/imap"
type=AVC msg=audit(1674646793.389:4242859): avc: denied { lock } for pid=13415 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646793.389:4242859): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffd9b4858f0 a3=63d11509 items=0 ppid=5547 pid=13415 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646793.389:4242859): proctitle="dovecot/imap"
type=AVC msg=audit(1674646793.390:4242860): avc: denied { read } for pid=13415 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674646793.390:4242860): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55ab23ca9300 a2=90800 a3=0 items=0 ppid=5547 pid=13415 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646793.390:4242860): proctitle="dovecot/imap"
type=AVC msg=audit(1674646793.390:4242861): avc: denied { getattr } for pid=13415 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674646793.390:4242861): arch=c000003e syscall=4 success=yes exit=0 a0=55ab23c6ba60 a1=7ffd9b485ca0 a2=7ffd9b485ca0 a3=6f632e6f72676173 items=0 ppid=5547 pid=13415 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646793.390:4242861): proctitle="dovecot/imap"
type=NETFILTER_CFG msg=audit(1674646793.876:4242862): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674646793.876:4242862): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2a5d56e010 items=0 ppid=13421 pid=13426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646793.876:4242862): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138322E3135312E32372E3538002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674646794.996:4242863): avc: denied { write } for pid=13435 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674646794.996:4242863): arch=c000003e syscall=21 success=yes exit=0 a0=5652ae6254c0 a1=2 a2=7b48 a3=7ffdb8ea88a0 items=0 ppid=5547 pid=13435 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646794.996:4242863): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674646797.691:4242864): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646797.691:4242865): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646797.692:4242866): pid=13453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13453 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646797.935:4242867): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=13453 suid=74 rport=42004 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646797.937:4242868): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=13453 suid=74 rport=42004 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=USER_AUTH msg=audit(1674646799.008:4242869): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=142.44.240.83 addr=142.44.240.83 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674646801.406:4242870): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674646801.496:4242872): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646801.496:4242871): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646801.496:4242874): pid=13475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646801.496:4242873): pid=13477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646801.497:4242875): pid=13475 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257695 res=1
type=LOGIN msg=audit(1674646801.497:4242876): pid=13477 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257696 res=1
type=USER_ACCT msg=audit(1674646801.501:4242877): pid=13476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646801.502:4242878): pid=13476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646801.502:4242879): pid=13476 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257697 res=1
type=USER_START msg=audit(1674646801.600:4242880): pid=13477 uid=0 auid=1055 ses=257696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646801.600:4242881): pid=13475 uid=0 auid=0 ses=257695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646801.601:4242882): pid=13476 uid=0 auid=0 ses=257697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646801.603:4242883): pid=13476 uid=0 auid=0 ses=257697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646801.603:4242884): pid=13475 uid=0 auid=0 ses=257695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646801.605:4242885): pid=13477 uid=0 auid=1055 ses=257696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646801.639:4242886): pid=13475 uid=0 auid=0 ses=257695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646801.643:4242887): pid=13475 uid=0 auid=0 ses=257695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674646801.656:4242888): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13453 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646801.656:4242889): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13453 suid=74 rport=42004 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646801.661:4242890): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646801.661:4242891): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646801.661:4242892): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674646801.661:4242893): pid=13452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674646802.025:4242894): pid=13477 uid=0 auid=1055 ses=257696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646802.045:4242895): pid=13477 uid=0 auid=1055 ses=257696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646805.102:4242896): pid=13476 uid=0 auid=0 ses=257697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646805.104:4242897): pid=13476 uid=0 auid=0 ses=257697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674646822.094:4242898): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646822.094:4242899): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646822.094:4242900): pid=13642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13642 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646822.096:4242901): pid=13630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=13642 suid=74 rport=50658 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=121.46.30.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646822.096:4242902): pid=13630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=13642 suid=74 rport=50658 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=121.46.30.109 terminal=? res=success'
type=AVC msg=audit(1674646822.442:4242903): avc: denied { name_connect } for pid=13348 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674646822.442:4242903): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffea8de39d0 a2=10 a3=7ffea8de39cc items=0 ppid=5547 pid=13348 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646822.442:4242903): proctitle="dovecot/auth"
type=AVC msg=audit(1674646822.454:4242904): avc: denied { write } for pid=13355 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674646822.454:4242904): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd5f9cc030 a2=6e a3=63d11526 items=0 ppid=5547 pid=13355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646822.454:4242904): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674646861.126:4242905): pid=13929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646861.127:4242906): pid=13929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646861.128:4242907): pid=13929 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257698 res=1
type=USER_START msg=audit(1674646861.147:4242908): pid=13929 uid=0 auid=1055 ses=257698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646861.149:4242909): pid=13929 uid=0 auid=1055 ses=257698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646861.496:4242910): pid=13929 uid=0 auid=1055 ses=257698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646861.499:4242911): pid=13929 uid=0 auid=1055 ses=257698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674646901.068:4242912): avc: denied { name_connect } for pid=13348 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674646901.068:4242912): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffea8de39d0 a2=10 a3=7ffea8de39cc items=0 ppid=5547 pid=13348 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646901.068:4242912): proctitle="dovecot/auth"
type=AVC msg=audit(1674646901.106:4242913): avc: denied { write } for pid=14299 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674646901.106:4242913): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc15857b90 a2=6e a3=63d11575 items=0 ppid=5547 pid=14299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674646901.106:4242913): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674646912.945:4242914): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646912.945:4242915): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646912.945:4242916): pid=14447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646913.098:4242917): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=14447 suid=74 rport=46727 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646913.099:4242918): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=14447 suid=74 rport=46727 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=USER_AUTH msg=audit(1674646913.818:4242919): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=110.159.244.121 addr=110.159.244.121 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674646915.865:4242920): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674646916.022:4242921): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14447 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646916.023:4242922): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14447 suid=74 rport=46727 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646916.024:4242923): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646916.024:4242924): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646916.024:4242925): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674646916.024:4242926): pid=14440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674646921.519:4242927): pid=14506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646921.519:4242928): pid=14506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646921.521:4242929): pid=14506 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257699 res=1
type=USER_START msg=audit(1674646921.538:4242930): pid=14506 uid=0 auid=1055 ses=257699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646921.540:4242931): pid=14506 uid=0 auid=1055 ses=257699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646921.801:4242932): pid=14506 uid=0 auid=1055 ses=257699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646921.804:4242933): pid=14506 uid=0 auid=1055 ses=257699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646981.822:4242934): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674646981.822:4242935): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646981.822:4242936): pid=14985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674646981.822:4242937): pid=14984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674646981.822:4242938): pid=14985 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257700 res=1
type=LOGIN msg=audit(1674646981.822:4242939): pid=14984 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257701 res=1
type=USER_START msg=audit(1674646981.866:4242940): pid=14985 uid=0 auid=1055 ses=257700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646981.867:4242941): pid=14985 uid=0 auid=1055 ses=257700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674646981.868:4242942): pid=14984 uid=0 auid=0 ses=257701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674646981.869:4242943): pid=14984 uid=0 auid=0 ses=257701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646981.925:4242944): pid=14984 uid=0 auid=0 ses=257701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646981.928:4242945): pid=14984 uid=0 auid=0 ses=257701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674646982.209:4242946): pid=14985 uid=0 auid=1055 ses=257700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674646982.212:4242947): pid=14985 uid=0 auid=1055 ses=257700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674646984.029:4242948): pid=15018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646984.029:4242949): pid=15018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646984.029:4242950): pid=15018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646984.267:4242951): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15018 suid=74 rport=52314 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674646984.267:4242952): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15018 suid=74 rport=52314 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=USER_AUTH msg=audit(1674646985.317:4242953): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=142.44.240.83 addr=142.44.240.83 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674646987.915:4242954): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674646988.154:4242955): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15018 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646988.155:4242956): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15018 suid=74 rport=52314 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646988.157:4242957): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646988.157:4242958): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674646988.157:4242959): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15017 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674646988.157:4242960): pid=15017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674647041.228:4242961): pid=15460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647041.228:4242962): pid=15460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647041.228:4242963): pid=15460 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257702 res=1
type=USER_START msg=audit(1674647041.244:4242964): pid=15460 uid=0 auid=1055 ses=257702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647041.246:4242965): pid=15460 uid=0 auid=1055 ses=257702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647041.495:4242966): pid=15460 uid=0 auid=1055 ses=257702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647041.497:4242967): pid=15460 uid=0 auid=1055 ses=257702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674647049.625:4242968): pid=15530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647049.626:4242969): pid=15530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647049.626:4242970): pid=15530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15530 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647049.863:4242971): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15530 suid=74 rport=48242 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647049.863:4242972): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15530 suid=74 rport=48242 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=USER_AUTH msg=audit(1674647050.923:4242973): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=142.44.240.83 addr=142.44.240.83 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674647052.779:4242974): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674647052.888:4242975): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674647052.888:4242975): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6c9915b010 items=0 ppid=15559 pid=15563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647052.888:4242975): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674647052.895:4242976): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674647052.895:4242976): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3963667010 items=0 ppid=15559 pid=15564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647052.895:4242976): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674647052.901:4242977): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674647052.901:4242977): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbc2aa6d010 items=0 ppid=15559 pid=15565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647052.901:4242977): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674647052.907:4242978): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674647052.907:4242978): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f172e4cd010 items=0 ppid=15559 pid=15566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647052.907:4242978): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=CRYPTO_KEY_USER msg=audit(1674647053.020:4242979): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15530 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647053.020:4242980): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15530 suid=74 rport=48242 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647053.022:4242981): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647053.022:4242982): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647053.022:4242983): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15529 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674647053.022:4242984): pid=15529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=142.44.240.83 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674647053.267:4242985): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674647053.267:4242985): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f387de98010 items=0 ppid=15559 pid=15575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647053.267:4242985): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232322E3235322E3234332E313034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674647053.275:4242986): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674647053.275:4242986): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efdd21b3010 items=0 ppid=15559 pid=15576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647053.275:4242986): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232322E3235322E3234332E313034002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674647053.283:4242987): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674647053.283:4242987): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f18fc439010 items=0 ppid=15559 pid=15577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647053.283:4242987): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003134322E34342E3234302E3833002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674647053.291:4242988): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674647053.291:4242988): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f23e798f010 items=0 ppid=15559 pid=15578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647053.291:4242988): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003134322E34342E3234302E3833002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674647096.085:4242989): avc: denied { read } for pid=15892 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674647096.085:4242989): avc: denied { open } for pid=15892 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647096.085:4242989): arch=c000003e syscall=2 success=yes exit=18 a0=558a88153f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=15892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647096.085:4242989): proctitle="dovecot/auth"
type=AVC msg=audit(1674647096.085:4242990): avc: denied { getattr } for pid=15892 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647096.085:4242990): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc653055a0 a2=7ffc653055a0 a3=fffffc00 items=0 ppid=5547 pid=15892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647096.085:4242990): proctitle="dovecot/auth"
type=AVC msg=audit(1674647098.325:4242991): avc: denied { name_connect } for pid=15892 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674647098.325:4242991): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc65305390 a2=10 a3=7ffc6530538c items=0 ppid=5547 pid=15892 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647098.325:4242991): proctitle="dovecot/auth"
type=AVC msg=audit(1674647098.354:4242992): avc: denied { write } for pid=15905 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647098.354:4242992): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd02e57dc0 a2=6e a3=63d1163a items=0 ppid=5547 pid=15905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647098.354:4242992): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674647101.516:4242993): pid=15933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647101.516:4242994): pid=15933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674647101.517:4242995): pid=15932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647101.517:4242996): pid=15932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647101.518:4242997): pid=15933 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257703 res=1
type=LOGIN msg=audit(1674647101.518:4242998): pid=15932 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257704 res=1
type=USER_START msg=audit(1674647101.556:4242999): pid=15933 uid=0 auid=1055 ses=257703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674647101.556:4243000): pid=15932 uid=0 auid=0 ses=257704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647101.557:4243001): pid=15933 uid=0 auid=1055 ses=257703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647101.559:4243002): pid=15932 uid=0 auid=0 ses=257704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647101.911:4243003): pid=15933 uid=0 auid=1055 ses=257703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647101.917:4243004): pid=15933 uid=0 auid=1055 ses=257703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647104.914:4243005): pid=15932 uid=0 auid=0 ses=257704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647104.917:4243006): pid=15932 uid=0 auid=0 ses=257704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647105.732:4243007): avc: denied { write } for pid=15905 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647105.732:4243007): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd02e57dc0 a2=6e a3=63d11641 items=0 ppid=5547 pid=15905 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647105.732:4243007): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674647161.936:4243008): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647161.936:4243009): pid=16399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647161.936:4243010): pid=16399 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257705 res=1
type=USER_START msg=audit(1674647161.958:4243011): pid=16399 uid=0 auid=1055 ses=257705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647161.961:4243012): pid=16399 uid=0 auid=1055 ses=257705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647162.269:4243013): pid=16399 uid=0 auid=1055 ses=257705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647162.272:4243014): pid=16399 uid=0 auid=1055 ses=257705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674647221.291:4243015): pid=16897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647221.291:4243016): pid=16897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647221.293:4243017): pid=16897 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257706 res=1
type=USER_START msg=audit(1674647221.322:4243018): pid=16897 uid=0 auid=1055 ses=257706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647221.327:4243019): pid=16897 uid=0 auid=1055 ses=257706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647221.657:4243020): pid=16897 uid=0 auid=1055 ses=257706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647221.659:4243021): pid=16897 uid=0 auid=1055 ses=257706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647233.688:4243022): avc: denied { read } for pid=17019 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674647233.688:4243022): avc: denied { open } for pid=17019 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647233.688:4243022): arch=c000003e syscall=2 success=yes exit=18 a0=559b663bef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647233.688:4243022): proctitle="dovecot/auth"
type=AVC msg=audit(1674647233.688:4243023): avc: denied { getattr } for pid=17019 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647233.688:4243023): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc6c36d720 a2=7ffc6c36d720 a3=fffffc00 items=0 ppid=5547 pid=17019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647233.688:4243023): proctitle="dovecot/auth"
type=AVC msg=audit(1674647234.289:4243024): avc: denied { name_connect } for pid=17019 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674647234.289:4243024): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc6c36d510 a2=10 a3=7ffc6c36d50c items=0 ppid=5547 pid=17019 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647234.289:4243024): proctitle="dovecot/auth"
type=AVC msg=audit(1674647236.622:4243025): avc: denied { write } for pid=17054 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647236.622:4243025): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffded2773f0 a2=6e a3=63d116c4 items=0 ppid=5547 pid=17054 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647236.622:4243025): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674647259.350:4243026): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674647259.350:4243026): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b1264925010 items=0 ppid=17238 pid=17244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647259.350:4243026): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3234392E312E313436002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674647281.676:4243027): pid=17325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647281.677:4243028): pid=17325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647281.677:4243029): pid=17325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257707 res=1
type=USER_START msg=audit(1674647281.690:4243030): pid=17325 uid=0 auid=1055 ses=257707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647281.693:4243031): pid=17325 uid=0 auid=1055 ses=257707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647281.975:4243032): pid=17325 uid=0 auid=1055 ses=257707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647281.978:4243033): pid=17325 uid=0 auid=1055 ses=257707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674647341.996:4243034): pid=17578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647341.996:4243035): pid=17578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647341.997:4243036): pid=17578 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257708 res=1
type=USER_START msg=audit(1674647342.016:4243037): pid=17578 uid=0 auid=1055 ses=257708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647342.018:4243038): pid=17578 uid=0 auid=1055 ses=257708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647342.333:4243039): pid=17578 uid=0 auid=1055 ses=257708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647342.335:4243040): pid=17578 uid=0 auid=1055 ses=257708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647358.372:4243041): avc: denied { read } for pid=17646 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674647358.372:4243041): avc: denied { open } for pid=17646 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647358.372:4243041): arch=c000003e syscall=2 success=yes exit=18 a0=563336a2ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647358.372:4243041): proctitle="dovecot/auth"
type=AVC msg=audit(1674647358.373:4243042): avc: denied { getattr } for pid=17646 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647358.373:4243042): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffeae291020 a2=7ffeae291020 a3=fffffc00 items=0 ppid=5547 pid=17646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647358.373:4243042): proctitle="dovecot/auth"
type=AVC msg=audit(1674647362.737:4243043): avc: denied { name_connect } for pid=17646 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674647362.737:4243043): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffeae290e10 a2=10 a3=7ffeae290e0c items=0 ppid=5547 pid=17646 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647362.737:4243043): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674647383.831:4243044): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674647383.831:4243044): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b1b4c70a010 items=0 ppid=17771 pid=17776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647383.831:4243044): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E37342E3230372E3334002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674647401.233:4243045): avc: denied { read append } for pid=17841 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674647401.233:4243045): avc: denied { open } for pid=17841 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647401.233:4243045): arch=c000003e syscall=2 success=yes exit=8 a0=5625d96ada60 a1=402 a2=7ffc9926f090 a3=7ffc9926eb20 items=0 ppid=5547 pid=17841 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647401.233:4243045): proctitle="dovecot/imap"
type=AVC msg=audit(1674647401.234:4243046): avc: denied { getattr } for pid=17841 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647401.234:4243046): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc9926eff0 a2=7ffc9926eff0 a3=7ffc9926ea60 items=0 ppid=5547 pid=17841 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647401.234:4243046): proctitle="dovecot/imap"
type=AVC msg=audit(1674647401.234:4243047): avc: denied { write } for pid=17841 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647401.234:4243047): arch=c000003e syscall=2 success=yes exit=10 a0=5625d96b2960 a1=2 a2=7ffc9926ed90 a3=7ffc9926e820 items=0 ppid=5547 pid=17841 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647401.234:4243047): proctitle="dovecot/imap"
type=AVC msg=audit(1674647401.234:4243048): avc: denied { lock } for pid=17841 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647401.234:4243048): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc9926ec90 a3=63d11769 items=0 ppid=5547 pid=17841 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647401.234:4243048): proctitle="dovecot/imap"
type=AVC msg=audit(1674647401.234:4243049): avc: denied { read } for pid=17841 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674647401.234:4243049): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5625d96db300 a2=90800 a3=0 items=0 ppid=5547 pid=17841 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647401.234:4243049): proctitle="dovecot/imap"
type=AVC msg=audit(1674647401.235:4243050): avc: denied { getattr } for pid=17841 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647401.235:4243050): arch=c000003e syscall=4 success=yes exit=0 a0=5625d969da60 a1=7ffc9926f040 a2=7ffc9926f040 a3=6f632e6f72676173 items=0 ppid=5547 pid=17841 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647401.235:4243050): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674647401.351:4243051): pid=17842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647401.351:4243052): pid=17842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647401.351:4243053): pid=17842 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257709 res=1
type=USER_ACCT msg=audit(1674647401.359:4243054): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647401.359:4243055): pid=17845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647401.359:4243056): pid=17845 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257710 res=1
type=USER_ACCT msg=audit(1674647401.367:4243057): pid=17843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647401.367:4243058): pid=17843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647401.367:4243059): pid=17843 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257711 res=1
type=USER_ACCT msg=audit(1674647401.371:4243060): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647401.371:4243061): pid=17846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647401.371:4243062): pid=17846 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257712 res=1
type=USER_START msg=audit(1674647401.431:4243063): pid=17842 uid=0 auid=0 ses=257709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674647401.432:4243064): pid=17845 uid=0 auid=0 ses=257710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674647401.433:4243065): pid=17843 uid=0 auid=0 ses=257711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674647401.433:4243066): pid=17846 uid=0 auid=1055 ses=257712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647401.433:4243067): pid=17845 uid=0 auid=0 ses=257710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647401.434:4243068): pid=17842 uid=0 auid=0 ses=257709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647401.434:4243069): pid=17843 uid=0 auid=0 ses=257711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647401.436:4243070): pid=17846 uid=0 auid=1055 ses=257712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647401.471:4243071): pid=17842 uid=0 auid=0 ses=257709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647401.476:4243072): pid=17842 uid=0 auid=0 ses=257709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647401.568:4243073): pid=17845 uid=0 auid=0 ses=257710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647401.573:4243074): pid=17845 uid=0 auid=0 ses=257710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647401.808:4243075): pid=17846 uid=0 auid=1055 ses=257712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647401.811:4243076): pid=17846 uid=0 auid=1055 ses=257712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647402.739:4243077): avc: denied { read } for pid=17875 comm="imap" name="dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674647402.739:4243077): avc: denied { open } for pid=17875 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647402.739:4243077): arch=c000003e syscall=2 success=yes exit=8 a0=55ca4b5654b0 a1=0 a2=7b48 a3=2 items=0 ppid=5547 pid=17875 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647402.739:4243077): proctitle="dovecot/imap"
type=AVC msg=audit(1674647402.739:4243078): avc: denied { getattr } for pid=17875 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647402.739:4243078): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffceb6ffba0 a2=7ffceb6ffba0 a3=2 items=0 ppid=5547 pid=17875 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647402.739:4243078): proctitle="dovecot/imap"
type=AVC msg=audit(1674647402.739:4243079): avc: denied { append } for pid=17875 comm="imap" name="dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647402.739:4243079): arch=c000003e syscall=2 success=yes exit=8 a0=55ca4b5b90d0 a1=402 a2=7ffceb6ffb00 a3=7ffceb6ff5a0 items=0 ppid=5547 pid=17875 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647402.739:4243079): proctitle="dovecot/imap"
type=AVC msg=audit(1674647402.739:4243080): avc: denied { write } for pid=17875 comm="imap" name="dovecot.index" dev="vda1" ino=33481563 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647402.739:4243080): arch=c000003e syscall=2 success=yes exit=10 a0=55ca4b5b8e10 a1=2 a2=7ffceb6ff800 a3=7ffceb6ff2a0 items=0 ppid=5547 pid=17875 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647402.739:4243080): proctitle="dovecot/imap"
type=AVC msg=audit(1674647402.740:4243081): avc: denied { write } for pid=17875 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674647402.740:4243081): arch=c000003e syscall=21 success=yes exit=0 a0=55ca4b5654c0 a1=2 a2=7b48 a3=7ffceb6ff6a0 items=0 ppid=5547 pid=17875 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647402.740:4243081): proctitle="dovecot/imap"
type=AVC msg=audit(1674647404.420:4243082): avc: denied { lock } for pid=17883 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647404.420:4243082): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffdc6fa1eb0 a3=63d1176c items=0 ppid=5547 pid=17883 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647404.420:4243082): proctitle="dovecot/imap"
type=CRED_DISP msg=audit(1674647404.847:4243083): pid=17843 uid=0 auid=0 ses=257711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647404.850:4243084): pid=17843 uid=0 auid=0 ses=257711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647407.493:4243085): avc: denied { write } for pid=17662 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647407.493:4243085): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe651d9180 a2=6e a3=63d1176f items=0 ppid=5547 pid=17662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647407.493:4243085): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674647430.932:4243086): avc: denied { name_connect } for pid=17646 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674647430.932:4243086): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffeae290e10 a2=10 a3=7ffeae290e0c items=0 ppid=5547 pid=17646 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647430.932:4243086): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674647432.018:4243087): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674647432.018:4243087): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b93b77e8010 items=0 ppid=18019 pid=18024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647432.018:4243087): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131312E37342E382E3230002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431313A
type=USER_ACCT msg=audit(1674647461.873:4243088): pid=18145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647461.874:4243089): pid=18145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647461.875:4243090): pid=18145 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257713 res=1
type=USER_START msg=audit(1674647461.895:4243091): pid=18145 uid=0 auid=1055 ses=257713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647461.896:4243092): pid=18145 uid=0 auid=1055 ses=257713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647462.231:4243093): pid=18145 uid=0 auid=1055 ses=257713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647462.234:4243094): pid=18145 uid=0 auid=1055 ses=257713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674647521.249:4243095): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647521.249:4243096): pid=18416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647521.250:4243097): pid=18416 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257714 res=1
type=USER_START msg=audit(1674647521.262:4243098): pid=18416 uid=0 auid=1055 ses=257714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647521.264:4243099): pid=18416 uid=0 auid=1055 ses=257714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647521.388:4243100): avc: denied { write } for pid=18294 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647521.388:4243100): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff53db4a20 a2=6e a3=63d117e1 items=0 ppid=5547 pid=18294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647521.388:4243100): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674647521.517:4243101): pid=18416 uid=0 auid=1055 ses=257714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647521.519:4243102): pid=18416 uid=0 auid=1055 ses=257714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674647559.161:4243103): pid=18601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647559.162:4243104): pid=18601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647559.162:4243105): pid=18601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647559.312:4243106): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18601 suid=74 rport=45114 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647559.312:4243107): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18601 suid=74 rport=45114 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=? res=success'
type=USER_AUTH msg=audit(1674647560.049:4243108): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.70.40.112 addr=193.70.40.112 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674647561.584:4243109): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674647561.739:4243110): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18601 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647561.739:4243111): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18601 suid=74 rport=45114 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647561.741:4243112): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647561.741:4243113): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647561.741:4243114): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674647561.741:4243115): pid=18600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674647581.535:4243116): pid=18688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647581.535:4243117): pid=18688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647581.535:4243118): pid=18688 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257715 res=1
type=USER_START msg=audit(1674647581.554:4243119): pid=18688 uid=0 auid=1055 ses=257715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647581.556:4243120): pid=18688 uid=0 auid=1055 ses=257715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647581.910:4243121): pid=18688 uid=0 auid=1055 ses=257715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647581.912:4243122): pid=18688 uid=0 auid=1055 ses=257715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647612.449:4243123): avc: denied { read } for pid=18858 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674647612.449:4243123): avc: denied { open } for pid=18858 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647612.449:4243123): arch=c000003e syscall=2 success=yes exit=18 a0=55a9269d6f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=18858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647612.449:4243123): proctitle="dovecot/auth"
type=AVC msg=audit(1674647612.449:4243124): avc: denied { getattr } for pid=18858 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647612.449:4243124): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc314183e0 a2=7ffc314183e0 a3=fffffc00 items=0 ppid=5547 pid=18858 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647612.449:4243124): proctitle="dovecot/auth"
type=AVC msg=audit(1674647613.113:4243125): avc: denied { name_connect } for pid=18858 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674647613.113:4243125): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc314181d0 a2=10 a3=7ffc314181cc items=0 ppid=5547 pid=18858 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647613.113:4243125): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674647641.934:4243126): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647641.935:4243127): pid=19056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647641.936:4243128): pid=19056 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257716 res=1
type=USER_START msg=audit(1674647641.949:4243129): pid=19056 uid=0 auid=1055 ses=257716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647641.950:4243130): pid=19056 uid=0 auid=1055 ses=257716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647642.310:4243131): pid=19056 uid=0 auid=1055 ses=257716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647642.313:4243132): pid=19056 uid=0 auid=1055 ses=257716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647653.589:4243133): avc: denied { name_connect } for pid=18858 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674647653.589:4243133): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffc314181d0 a2=10 a3=7ffc314181cc items=0 ppid=5547 pid=18858 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647653.589:4243133): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674647654.696:4243134): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674647654.696:4243134): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af99ecfe010 items=0 ppid=19113 pid=19119 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647654.696:4243134): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3232332E3233392E313334002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674647664.790:4243135): avc: denied { write } for pid=18889 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647664.790:4243135): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd731527a0 a2=6e a3=63d11870 items=0 ppid=5547 pid=18889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647664.790:4243135): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674647701.332:4243136): pid=19330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674647701.332:4243137): pid=19331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647701.332:4243138): pid=19330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647701.332:4243139): pid=19331 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647701.332:4243140): pid=19330 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257717 res=1
type=LOGIN msg=audit(1674647701.332:4243141): pid=19331 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257718 res=1
type=USER_START msg=audit(1674647701.376:4243142): pid=19330 uid=0 auid=0 ses=257717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674647701.376:4243143): pid=19331 uid=0 auid=1055 ses=257718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647701.378:4243144): pid=19331 uid=0 auid=1055 ses=257718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647701.378:4243145): pid=19330 uid=0 auid=0 ses=257717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647701.765:4243146): pid=19331 uid=0 auid=1055 ses=257718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647701.769:4243147): pid=19331 uid=0 auid=1055 ses=257718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647704.759:4243148): pid=19330 uid=0 auid=0 ses=257717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647704.764:4243149): pid=19330 uid=0 auid=0 ses=257717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674647722.651:4243150): pid=19424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647722.652:4243151): pid=19424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647722.652:4243152): pid=19424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647722.803:4243153): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19424 suid=74 rport=56241 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647722.803:4243154): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19424 suid=74 rport=56241 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=USER_AUTH msg=audit(1674647723.515:4243155): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=110.159.244.121 addr=110.159.244.121 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674647725.431:4243156): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674647725.586:4243157): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19424 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647725.586:4243158): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19424 suid=74 rport=56241 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647725.588:4243159): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647725.588:4243160): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647725.588:4243161): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19423 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674647725.588:4243162): pid=19423 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=ssh res=failed'
type=AVC msg=audit(1674647745.393:4243163): avc: denied { read } for pid=19540 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674647745.393:4243163): avc: denied { open } for pid=19540 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647745.393:4243163): arch=c000003e syscall=2 success=yes exit=18 a0=55f35dcc6f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=19540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647745.393:4243163): proctitle="dovecot/auth"
type=AVC msg=audit(1674647745.393:4243164): avc: denied { getattr } for pid=19540 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647745.393:4243164): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffec886cdd0 a2=7ffec886cdd0 a3=fffffc00 items=0 ppid=5547 pid=19540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647745.393:4243164): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674647755.156:4243165): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674647755.156:4243165): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae0fee61010 items=0 ppid=19581 pid=19588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647755.156:4243165): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3134332E3130322E323132002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674647761.785:4243166): pid=19610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647761.785:4243167): pid=19610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647761.787:4243168): pid=19610 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257719 res=1
type=USER_START msg=audit(1674647761.808:4243169): pid=19610 uid=0 auid=1055 ses=257719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647761.810:4243170): pid=19610 uid=0 auid=1055 ses=257719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647762.108:4243171): pid=19610 uid=0 auid=1055 ses=257719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647762.111:4243172): pid=19610 uid=0 auid=1055 ses=257719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674647768.393:4243173): avc: denied { name_connect } for pid=19540 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674647768.393:4243173): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffec886cbc0 a2=10 a3=7ffec886cbbc items=0 ppid=5547 pid=19540 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647768.393:4243173): proctitle="dovecot/auth"
type=AVC msg=audit(1674647768.426:4243174): avc: denied { write } for pid=19646 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647768.426:4243174): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffef353e7f0 a2=6e a3=63d118d8 items=0 ppid=5547 pid=19646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647768.426:4243174): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674647768.622:4243175): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647768.622:4243176): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647768.622:4243177): pid=19650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647768.762:4243178): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19650 suid=74 rport=37498 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647768.762:4243179): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19650 suid=74 rport=37498 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=? res=success'
type=USER_AUTH msg=audit(1674647769.461:4243180): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=193.70.40.112 addr=193.70.40.112 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674647772.024:4243181): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674647772.168:4243182): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19650 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647772.168:4243183): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19650 suid=74 rport=37498 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647772.170:4243184): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647772.170:4243185): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647772.170:4243186): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674647772.170:4243187): pid=19649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=193.70.40.112 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674647773.306:4243188): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674647773.306:4243188): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f35899ae010 items=0 ppid=19671 pid=19674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647773.306:4243188): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674647773.312:4243189): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674647773.312:4243189): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff34f1bc010 items=0 ppid=19671 pid=19675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647773.312:4243189): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674647773.317:4243190): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674647773.317:4243190): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6f1ed8d010 items=0 ppid=19671 pid=19677 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647773.317:4243190): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674647773.323:4243191): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674647773.323:4243191): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb1b7319010 items=0 ppid=19671 pid=19678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647773.323:4243191): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674647773.690:4243192): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674647773.690:4243192): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5acaa3a010 items=0 ppid=19671 pid=19686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647773.690:4243192): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132332E33312E32392E313331002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674647773.700:4243193): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674647773.700:4243193): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2e17df4010 items=0 ppid=19671 pid=19687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647773.700:4243193): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132332E33312E32392E313331002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674647773.709:4243194): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674647773.709:4243194): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6bf9ed8010 items=0 ppid=19671 pid=19688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647773.709:4243194): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003139332E37302E34302E313132002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674647773.717:4243195): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674647773.717:4243195): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f28d1d34010 items=0 ppid=19671 pid=19689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647773.717:4243195): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003139332E37302E34302E313132002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674647794.027:4243196): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674647794.027:4243196): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b604da7c010 items=0 ppid=19793 pid=19799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647794.027:4243196): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003135332E302E3136332E3935002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543131
type=USER_ACCT msg=audit(1674647821.132:4243197): pid=19917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647821.132:4243198): pid=19917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647821.134:4243199): pid=19917 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257720 res=1
type=USER_START msg=audit(1674647821.150:4243200): pid=19917 uid=0 auid=1055 ses=257720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647821.151:4243201): pid=19917 uid=0 auid=1055 ses=257720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647821.447:4243202): pid=19917 uid=0 auid=1055 ses=257720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647821.451:4243203): pid=19917 uid=0 auid=1055 ses=257720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674647833.358:4243204): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647833.358:4243205): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647833.358:4243206): pid=19979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647833.871:4243207): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=19979 suid=74 rport=39700 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647833.871:4243208): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=19979 suid=74 rport=39700 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674647834.637:4243209): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674647836.457:4243210): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674647836.742:4243211): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19979 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647836.742:4243212): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19979 suid=74 rport=39700 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647836.743:4243213): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647836.743:4243214): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647836.743:4243215): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674647836.743:4243216): pid=19969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674647881.468:4243218): pid=20176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674647881.468:4243217): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647881.469:4243219): pid=20176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647881.469:4243220): pid=20177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647881.469:4243221): pid=20176 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257721 res=1
type=LOGIN msg=audit(1674647881.469:4243222): pid=20177 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257722 res=1
type=USER_START msg=audit(1674647881.509:4243223): pid=20176 uid=0 auid=0 ses=257721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674647881.510:4243224): pid=20177 uid=0 auid=1055 ses=257722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647881.512:4243225): pid=20177 uid=0 auid=1055 ses=257722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647881.512:4243226): pid=20176 uid=0 auid=0 ses=257721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647881.572:4243227): pid=20176 uid=0 auid=0 ses=257721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647881.575:4243228): pid=20176 uid=0 auid=0 ses=257721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647881.803:4243229): pid=20177 uid=0 auid=1055 ses=257722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647881.804:4243230): pid=20177 uid=0 auid=1055 ses=257722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674647902.151:4243231): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647902.151:4243232): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647902.151:4243233): pid=20266 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20266 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647902.577:4243234): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=20266 suid=74 rport=13211 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647902.577:4243235): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=20266 suid=74 rport=13211 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=USER_AUTH msg=audit(1674647904.724:4243236): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674647906.485:4243237): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674647906.925:4243238): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20266 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647906.925:4243239): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20266 suid=74 rport=13211 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647906.926:4243240): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647906.926:4243241): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647906.926:4243242): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20260 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674647906.926:4243243): pid=20260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674647917.710:4243244): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647917.710:4243245): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647917.710:4243246): pid=20340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647917.864:4243247): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=20340 suid=74 rport=47986 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674647917.864:4243248): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=20340 suid=74 rport=47986 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=USER_AUTH msg=audit(1674647918.583:4243249): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=110.159.244.121 addr=110.159.244.121 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674647920.600:4243250): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674647920.757:4243251): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20340 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647920.757:4243252): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20340 suid=74 rport=47986 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647920.758:4243253): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647920.758:4243254): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674647920.758:4243255): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674647920.758:4243256): pid=20339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.159.244.121 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674647923.396:4243257): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674647923.396:4243257): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fede0987010 items=0 ppid=20372 pid=20378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647923.396:4243257): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674647923.401:4243258): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674647923.401:4243258): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa5d3598010 items=0 ppid=20372 pid=20379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647923.401:4243258): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674647923.405:4243259): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674647923.405:4243259): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3d11176010 items=0 ppid=20372 pid=20380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647923.405:4243259): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674647923.409:4243260): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674647923.409:4243260): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0c3e158010 items=0 ppid=20372 pid=20381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647923.409:4243260): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674647923.714:4243261): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674647923.714:4243261): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0d19c0c010 items=0 ppid=20372 pid=20390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647923.714:4243261): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730037352E38382E3139312E3733002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674647923.720:4243262): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674647923.720:4243262): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb5d7e04010 items=0 ppid=20372 pid=20391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647923.720:4243262): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640037352E38382E3139312E3733002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674647923.726:4243263): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674647923.726:4243263): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f959d824010 items=0 ppid=20372 pid=20392 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647923.726:4243263): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003131302E3135392E3234342E313231002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674647923.731:4243264): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674647923.731:4243264): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feccbd5f010 items=0 ppid=20372 pid=20393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647923.731:4243264): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003131302E3135392E3234342E313231002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674647924.186:4243265): avc: denied { read } for pid=20420 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674647924.186:4243265): avc: denied { open } for pid=20420 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647924.186:4243265): arch=c000003e syscall=2 success=yes exit=18 a0=560006fb2f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647924.186:4243265): proctitle="dovecot/auth"
type=AVC msg=audit(1674647924.187:4243266): avc: denied { getattr } for pid=20420 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674647924.187:4243266): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcaeb1e500 a2=7ffcaeb1e500 a3=fffffc00 items=0 ppid=5547 pid=20420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647924.187:4243266): proctitle="dovecot/auth"
type=AVC msg=audit(1674647924.713:4243267): avc: denied { name_connect } for pid=20420 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674647924.713:4243267): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcaeb1e2f0 a2=10 a3=7ffcaeb1e2ec items=0 ppid=5547 pid=20420 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647924.713:4243267): proctitle="dovecot/auth"
type=AVC msg=audit(1674647924.741:4243268): avc: denied { write } for pid=20450 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647924.741:4243268): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc99fe4d10 a2=6e a3=63d11974 items=0 ppid=5547 pid=20450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647924.741:4243268): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674647927.168:4243269): avc: denied { write } for pid=20450 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674647927.168:4243269): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc99fe4d10 a2=6e a3=63d11977 items=0 ppid=5547 pid=20450 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674647927.168:4243269): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674647941.829:4243270): pid=20572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674647941.830:4243271): pid=20572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674647941.831:4243272): pid=20572 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257723 res=1
type=USER_START msg=audit(1674647941.874:4243273): pid=20572 uid=0 auid=1055 ses=257723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674647941.876:4243274): pid=20572 uid=0 auid=1055 ses=257723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674647942.266:4243275): pid=20572 uid=0 auid=1055 ses=257723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674647942.270:4243276): pid=20572 uid=0 auid=1055 ses=257723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648001.298:4243277): pid=20826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648001.298:4243278): pid=20826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648001.298:4243279): pid=20826 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257724 res=1
type=USER_ACCT msg=audit(1674648001.303:4243280): pid=20825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648001.303:4243281): pid=20825 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648001.303:4243282): pid=20825 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=209 tty=(none) old-ses=4294967295 ses=257725 res=1
type=USER_ACCT msg=audit(1674648001.304:4243283): pid=20827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648001.304:4243284): pid=20827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648001.304:4243285): pid=20827 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257726 res=1
type=USER_ACCT msg=audit(1674648001.307:4243286): pid=20828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648001.307:4243287): pid=20828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648001.308:4243288): pid=20828 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257727 res=1
type=USER_ACCT msg=audit(1674648001.309:4243289): pid=20824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648001.309:4243290): pid=20824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648001.310:4243291): pid=20824 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257728 res=1
type=USER_START msg=audit(1674648001.382:4243292): pid=20825 uid=0 auid=209 ses=257725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648001.383:4243293): pid=20827 uid=0 auid=0 ses=257726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648001.383:4243294): pid=20828 uid=0 auid=1055 ses=257727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648001.383:4243295): pid=20826 uid=0 auid=0 ses=257724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648001.384:4243296): pid=20824 uid=0 auid=0 ses=257728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648001.385:4243297): pid=20825 uid=0 auid=209 ses=257725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648001.385:4243298): pid=20827 uid=0 auid=0 ses=257726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648001.388:4243299): pid=20828 uid=0 auid=1055 ses=257727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648001.389:4243300): pid=20826 uid=0 auid=0 ses=257724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648001.393:4243301): pid=20824 uid=0 auid=0 ses=257728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648001.490:4243302): pid=20824 uid=0 auid=0 ses=257728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648001.492:4243303): pid=20824 uid=0 auid=0 ses=257728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648001.530:4243304): pid=20826 uid=0 auid=0 ses=257724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648001.537:4243305): pid=20826 uid=0 auid=0 ses=257724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648001.622:4243306): pid=20825 uid=0 auid=209 ses=257725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648001.625:4243307): pid=20825 uid=0 auid=209 ses=257725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="mailman" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648001.768:4243308): pid=20828 uid=0 auid=1055 ses=257727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648001.770:4243309): pid=20828 uid=0 auid=1055 ses=257727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648004.877:4243310): pid=20827 uid=0 auid=0 ses=257726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648004.883:4243311): pid=20827 uid=0 auid=0 ses=257726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674648019.321:4243312): avc: denied { write } for pid=20925 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674648019.321:4243312): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc5f2d3390 a2=6e a3=63d119d3 items=0 ppid=5547 pid=20925 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648019.321:4243312): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674648019.340:4243313): avc: denied { read append } for pid=20924 comm="quota-status" name="maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674648019.340:4243313): avc: denied { open } for pid=20924 comm="quota-status" path="/home/remysagr/mail/remysagro.com/sales/maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648019.340:4243313): arch=c000003e syscall=2 success=yes exit=16 a0=55e6ccb22280 a1=402 a2=7ffc211133f0 a3=7f3e570881c0 items=0 ppid=5547 pid=20924 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="quota-status" exe="/usr/libexec/dovecot/quota-status" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648019.340:4243313): proctitle=646F7665636F742F71756F74612D737461747573002D7000706F7374666978
type=AVC msg=audit(1674648023.663:4243314): avc: denied { getattr } for pid=20952 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/.spam/dovecot.index.log" dev="vda1" ino=247725189 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648023.663:4243314): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe149bb6e0 a2=7ffe149bb6e0 a3=7ffe149bb160 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.663:4243314): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648023.727:4243315): avc: denied { write } for pid=20952 comm="lmtp" name="dovecot.index" dev="vda1" ino=247572915 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648023.727:4243315): arch=c000003e syscall=2 success=yes exit=19 a0=5586b4e46c60 a1=2 a2=7ffe149bb480 a3=7ffe149baf20 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.727:4243315): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648023.728:4243316): avc: denied { write } for pid=20952 comm="lmtp" name="tmp" dev="vda1" ino=46803730 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648023.728:4243316): avc: denied { add_name } for pid=20952 comm="lmtp" name="1674648023.M663201P20952.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648023.728:4243316): avc: denied { create } for pid=20952 comm="lmtp" name="1674648023.M663201P20952.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648023.728:4243316): arch=c000003e syscall=2 success=yes exit=21 a0=5586b4da0a48 a1=2c1 a2=1ff a3=7ffe149bb320 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.728:4243316): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648023.736:4243317): avc: denied { lock } for pid=20952 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/.spam/dovecot.index.log" dev="vda1" ino=247725189 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648023.736:4243317): arch=c000003e syscall=72 success=yes exit=0 a0=12 a1=7 a2=7ffe149bb310 a3=63d119d7 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.736:4243317): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648023.736:4243318): avc: denied { remove_name } for pid=20952 comm="lmtp" name="1674648023.M663201P20952.host.nexidigital.com" dev="vda1" ino=48866234 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648023.736:4243318): avc: denied { rename } for pid=20952 comm="lmtp" name="1674648023.M663201P20952.host.nexidigital.com" dev="vda1" ino=48866234 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648023.736:4243318): arch=c000003e syscall=82 success=yes exit=0 a0=5586b4d9d6d8 a1=5586b4d9d738 a2=6888 a3=7ffe149bb2a0 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.736:4243318): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648023.736:4243319): avc: denied { read } for pid=20952 comm="lmtp" name="new" dev="vda1" ino=42371891 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674648023.736:4243319): arch=c000003e syscall=2 success=yes exit=23 a0=5586b4e4bd28 a1=0 a2=0 a3=7ffe149bb2a0 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.736:4243319): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648023.741:4243320): avc: denied { unlink } for pid=20952 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=247572922 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648023.741:4243320): arch=c000003e syscall=87 success=yes exit=0 a0=5586b4e46f80 a1=7fe9b9f16071 a2=2f9 a3=7ffe149bb3a0 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.741:4243320): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648023.743:4243321): avc: denied { link } for pid=20952 comm="lmtp" name=".temp.host.nexidigital.com.20952.70548a44878747af" dev="vda1" ino=29430837 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648023.743:4243321): arch=c000003e syscall=86 success=yes exit=0 a0=5586b4da1118 a1=5586b4da1078 a2=1 a3=63d119d7 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.743:4243321): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648023.743:4243322): avc: denied { setattr } for pid=20952 comm="lmtp" name=".temp.host.nexidigital.com.20952.70548a44878747af" dev="vda1" ino=29430837 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648023.743:4243322): arch=c000003e syscall=91 success=yes exit=0 a0=15 a1=1a0 a2=3f9 a3=37 items=0 ppid=5547 pid=20952 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648023.743:4243322): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674648061.902:4243323): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648061.902:4243324): pid=21121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648061.902:4243325): pid=21121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648061.902:4243326): pid=21122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648061.904:4243327): pid=21121 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257729 res=1
type=LOGIN msg=audit(1674648061.904:4243328): pid=21122 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257730 res=1
type=AVC msg=audit(1674648061.921:4243329): avc: denied { name_connect } for pid=20420 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674648061.921:4243329): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffcaeb1e2f0 a2=10 a3=7ffcaeb1e2ec items=0 ppid=5547 pid=20420 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648061.921:4243329): proctitle="dovecot/auth"
type=USER_START msg=audit(1674648061.953:4243330): pid=21121 uid=0 auid=0 ses=257729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648061.956:4243331): pid=21122 uid=0 auid=1055 ses=257730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648061.956:4243332): pid=21121 uid=0 auid=0 ses=257729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648061.959:4243333): pid=21122 uid=0 auid=1055 ses=257730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648062.002:4243334): pid=21121 uid=0 auid=0 ses=257729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648062.013:4243335): pid=21121 uid=0 auid=0 ses=257729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648062.349:4243336): pid=21122 uid=0 auid=1055 ses=257730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648062.352:4243337): pid=21122 uid=0 auid=1055 ses=257730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648121.371:4243338): pid=21399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648121.371:4243339): pid=21399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648121.372:4243340): pid=21399 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257731 res=1
type=USER_START msg=audit(1674648121.387:4243341): pid=21399 uid=0 auid=1055 ses=257731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648121.389:4243342): pid=21399 uid=0 auid=1055 ses=257731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648121.734:4243343): pid=21399 uid=0 auid=1055 ses=257731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648121.736:4243344): pid=21399 uid=0 auid=1055 ses=257731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674648172.851:4243345): avc: denied { read } for pid=21628 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674648172.851:4243345): avc: denied { open } for pid=21628 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648172.851:4243345): arch=c000003e syscall=2 success=yes exit=18 a0=563522d84f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=21628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648172.851:4243345): proctitle="dovecot/auth"
type=AVC msg=audit(1674648172.851:4243346): avc: denied { getattr } for pid=21628 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648172.851:4243346): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff8ffc7880 a2=7fff8ffc7880 a3=fffffc00 items=0 ppid=5547 pid=21628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648172.851:4243346): proctitle="dovecot/auth"
type=AVC msg=audit(1674648174.427:4243347): avc: denied { name_connect } for pid=21628 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674648174.427:4243347): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff8ffc7670 a2=10 a3=7fff8ffc766c items=0 ppid=5547 pid=21628 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648174.427:4243347): proctitle="dovecot/auth"
type=AVC msg=audit(1674648174.454:4243348): avc: denied { write } for pid=21634 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674648174.454:4243348): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe161e7c00 a2=6e a3=63d11a6e items=0 ppid=5547 pid=21634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648174.454:4243348): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674648181.754:4243349): pid=21668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648181.755:4243350): pid=21668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648181.755:4243351): pid=21668 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257732 res=1
type=USER_START msg=audit(1674648181.782:4243352): pid=21668 uid=0 auid=1055 ses=257732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648181.784:4243353): pid=21668 uid=0 auid=1055 ses=257732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648182.111:4243354): pid=21668 uid=0 auid=1055 ses=257732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648182.114:4243355): pid=21668 uid=0 auid=1055 ses=257732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648241.129:4243356): pid=21923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648241.129:4243357): pid=21923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648241.130:4243358): pid=21923 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257733 res=1
type=USER_START msg=audit(1674648241.165:4243359): pid=21923 uid=0 auid=1055 ses=257733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648241.167:4243360): pid=21923 uid=0 auid=1055 ses=257733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674648241.431:4243361): pid=21932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648241.431:4243362): pid=21932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648241.431:4243363): pid=21932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674648241.450:4243364): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=21932 suid=74 rport=48976 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674648241.451:4243365): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=21932 suid=74 rport=48976 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=CRED_DISP msg=audit(1674648241.519:4243366): pid=21923 uid=0 auid=1055 ses=257733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648241.522:4243367): pid=21923 uid=0 auid=1055 ses=257733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674648244.018:4243368): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=107.189.30.59 addr=107.189.30.59 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674648245.788:4243369): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674648246.446:4243370): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21932 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648246.446:4243371): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21932 suid=74 rport=48976 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648246.447:4243372): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21921 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648246.448:4243373): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21921 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648246.448:4243374): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21921 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674648246.448:4243375): pid=21921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=ssh res=failed'
type=AVC msg=audit(1674648250.364:4243376): avc: denied { write } for pid=21634 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674648250.364:4243376): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe161e7c00 a2=6e a3=63d11aba items=0 ppid=5547 pid=21634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648250.364:4243376): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674648268.375:4243377): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674648268.375:4243377): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b8e337ed010 items=0 ppid=22151 pid=22157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648268.375:4243377): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3133382E35362E3432002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674648301.540:4243380): pid=22290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648301.540:4243379): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648301.540:4243378): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648301.540:4243381): pid=22288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648301.540:4243382): pid=22289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648301.540:4243383): pid=22290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648301.541:4243384): pid=22290 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257734 res=1
type=LOGIN msg=audit(1674648301.541:4243386): pid=22288 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257736 res=1
type=LOGIN msg=audit(1674648301.541:4243385): pid=22289 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257735 res=1
type=USER_START msg=audit(1674648301.580:4243387): pid=22288 uid=0 auid=0 ses=257736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648301.580:4243388): pid=22289 uid=0 auid=0 ses=257735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648301.582:4243389): pid=22290 uid=0 auid=1055 ses=257734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648301.583:4243390): pid=22288 uid=0 auid=0 ses=257736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648301.583:4243391): pid=22289 uid=0 auid=0 ses=257735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648301.583:4243392): pid=22290 uid=0 auid=1055 ses=257734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648301.668:4243393): pid=22289 uid=0 auid=0 ses=257735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648301.671:4243394): pid=22289 uid=0 auid=0 ses=257735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648301.943:4243395): pid=22290 uid=0 auid=1055 ses=257734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648301.947:4243396): pid=22290 uid=0 auid=1055 ses=257734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648304.930:4243397): pid=22288 uid=0 auid=0 ses=257736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648304.933:4243398): pid=22288 uid=0 auid=0 ses=257736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674648306.169:4243399): avc: denied { read append } for pid=22331 comm="quota-status" name="maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674648306.169:4243399): avc: denied { open } for pid=22331 comm="quota-status" path="/home/remysagr/mail/remysagro.com/sales/maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648306.169:4243399): arch=c000003e syscall=2 success=yes exit=16 a0=55e0d6669280 a1=402 a2=7ffecf4cb300 a3=7f57e780f1c0 items=0 ppid=5547 pid=22331 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="quota-status" exe="/usr/libexec/dovecot/quota-status" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648306.169:4243399): proctitle=646F7665636F742F71756F74612D737461747573002D7000706F7374666978
type=AVC msg=audit(1674648308.596:4243400): avc: denied { getattr } for pid=22344 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648308.596:4243400): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffee97894d0 a2=7ffee97894d0 a3=7ffee9788f20 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.596:4243400): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648308.596:4243401): avc: denied { write } for pid=22344 comm="lmtp" name="dovecot.index" dev="vda1" ino=33481563 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648308.596:4243401): arch=c000003e syscall=2 success=yes exit=18 a0=5641c7f3dc20 a1=2 a2=7ffee9789270 a3=7ffee9788d20 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.596:4243401): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648308.600:4243402): avc: denied { write } for pid=22344 comm="lmtp" name="tmp" dev="vda1" ino=260247868 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648308.600:4243402): avc: denied { add_name } for pid=22344 comm="lmtp" name="1674648308.M596258P22344.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648308.600:4243402): avc: denied { create } for pid=22344 comm="lmtp" name="1674648308.M596258P22344.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648308.600:4243402): arch=c000003e syscall=2 success=yes exit=21 a0=5641c7e8f900 a1=2c1 a2=1ff a3=7ffee97890e0 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.600:4243402): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648308.604:4243403): avc: denied { lock } for pid=22344 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648308.604:4243403): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffee9789100 a3=63d11af4 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.604:4243403): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648308.604:4243404): avc: denied { remove_name } for pid=22344 comm="lmtp" name="1674648308.M596258P22344.host.nexidigital.com" dev="vda1" ino=260272867 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648308.604:4243404): avc: denied { rename } for pid=22344 comm="lmtp" name="1674648308.M596258P22344.host.nexidigital.com" dev="vda1" ino=260272867 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648308.604:4243404): arch=c000003e syscall=82 success=yes exit=0 a0=5641c7e8c580 a1=5641c7e8c5e0 a2=69e8 a3=7ffee97890a0 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.604:4243404): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648308.604:4243405): avc: denied { read } for pid=22344 comm="lmtp" name="new" dev="vda1" ino=256006826 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674648308.604:4243405): arch=c000003e syscall=2 success=yes exit=21 a0=5641c7f60c90 a1=0 a2=0 a3=7ffee97890a0 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.604:4243405): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648308.608:4243406): avc: denied { unlink } for pid=22344 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=33481505 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648308.608:4243406): arch=c000003e syscall=87 success=yes exit=0 a0=5641c7f68080 a1=7fe8b4042071 a2=2f9 a3=7ffee97891a0 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.608:4243406): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648308.609:4243407): avc: denied { link } for pid=22344 comm="lmtp" name=".temp.host.nexidigital.com.22344.830d7a91344e40ec" dev="vda1" ino=33481505 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648308.609:4243407): arch=c000003e syscall=86 success=yes exit=0 a0=5641c7e8ffc8 a1=5641c7e8ff28 a2=1 a3=63d11af4 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.609:4243407): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648308.609:4243408): avc: denied { setattr } for pid=22344 comm="lmtp" name=".temp.host.nexidigital.com.22344.830d7a91344e40ec" dev="vda1" ino=33481505 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648308.609:4243408): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=3f9 a3=37 items=0 ppid=5547 pid=22344 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648308.609:4243408): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674648332.459:4243409): avc: denied { name_connect } for pid=21628 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674648332.459:4243409): arch=c000003e syscall=42 success=no exit=-115 a0=19 a1=7fff8ffc7670 a2=10 a3=7fff8ffc766c items=0 ppid=5547 pid=21628 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648332.459:4243409): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674648361.955:4243410): pid=22590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648361.955:4243411): pid=22590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648361.956:4243412): pid=22590 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257737 res=1
type=USER_START msg=audit(1674648361.977:4243413): pid=22590 uid=0 auid=1055 ses=257737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648361.979:4243414): pid=22590 uid=0 auid=1055 ses=257737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648362.318:4243415): pid=22590 uid=0 auid=1055 ses=257737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648362.320:4243416): pid=22590 uid=0 auid=1055 ses=257737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648421.337:4243417): pid=22835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648421.337:4243418): pid=22835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648421.337:4243419): pid=22835 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257738 res=1
type=USER_START msg=audit(1674648421.352:4243420): pid=22835 uid=0 auid=1055 ses=257738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648421.353:4243421): pid=22835 uid=0 auid=1055 ses=257738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648421.670:4243422): pid=22835 uid=0 auid=1055 ses=257738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648421.673:4243423): pid=22835 uid=0 auid=1055 ses=257738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674648425.257:4243424): avc: denied { name_connect } for pid=21628 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674648425.257:4243424): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff8ffc7670 a2=10 a3=7fff8ffc766c items=0 ppid=5547 pid=21628 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648425.257:4243424): proctitle="dovecot/auth"
type=AVC msg=audit(1674648425.294:4243425): avc: denied { write } for pid=22861 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674648425.294:4243425): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcf957ed70 a2=6e a3=63d11b69 items=0 ppid=5547 pid=22861 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648425.294:4243425): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674648430.676:4243426): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674648430.676:4243426): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2c9c9e4010 items=0 ppid=22884 pid=22889 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648430.676:4243426): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130312E33352E3230302E313533002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674648481.694:4243427): pid=23100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648481.695:4243428): pid=23100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648481.695:4243429): pid=23100 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257739 res=1
type=USER_START msg=audit(1674648481.711:4243430): pid=23100 uid=0 auid=1055 ses=257739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648481.714:4243431): pid=23100 uid=0 auid=1055 ses=257739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648482.095:4243432): pid=23100 uid=0 auid=1055 ses=257739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648482.097:4243433): pid=23100 uid=0 auid=1055 ses=257739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648541.110:4243434): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648541.110:4243435): pid=23351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648541.110:4243436): pid=23350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648541.110:4243437): pid=23351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648541.111:4243438): pid=23350 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257740 res=1
type=LOGIN msg=audit(1674648541.111:4243439): pid=23351 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257741 res=1
type=USER_START msg=audit(1674648541.139:4243440): pid=23350 uid=0 auid=0 ses=257740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648541.140:4243441): pid=23351 uid=0 auid=1055 ses=257741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648541.140:4243442): pid=23351 uid=0 auid=1055 ses=257741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648541.141:4243443): pid=23350 uid=0 auid=0 ses=257740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648541.499:4243444): pid=23351 uid=0 auid=1055 ses=257741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648541.503:4243445): pid=23351 uid=0 auid=1055 ses=257741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648542.650:4243446): pid=23350 uid=0 auid=0 ses=257740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648542.651:4243447): pid=23350 uid=0 auid=0 ses=257740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674648547.188:4243448): avc: denied { read } for pid=23391 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674648547.188:4243448): avc: denied { open } for pid=23391 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648547.188:4243448): arch=c000003e syscall=2 success=yes exit=18 a0=55a108dbff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=23391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648547.188:4243448): proctitle="dovecot/auth"
type=AVC msg=audit(1674648547.188:4243449): avc: denied { getattr } for pid=23391 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648547.188:4243449): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcf118b1b0 a2=7ffcf118b1b0 a3=fffffc00 items=0 ppid=5547 pid=23391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648547.188:4243449): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674648552.143:4243450): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674648552.143:4243450): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b4c35759010 items=0 ppid=23419 pid=23426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648552.143:4243450): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131302E3136362E3231362E313632002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=AVC msg=audit(1674648556.356:4243451): avc: denied { write } for pid=23478 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674648556.356:4243451): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd4c415550 a2=6e a3=63d11bec items=0 ppid=5547 pid=23478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648556.356:4243451): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674648582.816:4243452): avc: denied { name_connect } for pid=23391 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674648582.816:4243452): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffcf118afa0 a2=10 a3=7ffcf118af9c items=0 ppid=5547 pid=23391 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648582.816:4243452): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674648583.911:4243453): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674648583.911:4243453): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b942be55010 items=0 ppid=23666 pid=23672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648583.911:4243453): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132342E3230352E32352E313130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674648601.679:4243454): pid=23745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648601.679:4243455): pid=23745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648601.680:4243456): pid=23745 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257742 res=1
type=USER_ACCT msg=audit(1674648601.680:4243457): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648601.680:4243458): pid=23743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648601.680:4243459): pid=23743 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257743 res=1
type=USER_ACCT msg=audit(1674648601.681:4243460): pid=23744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648601.681:4243461): pid=23744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648601.682:4243462): pid=23744 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257744 res=1
type=USER_START msg=audit(1674648601.834:4243463): pid=23743 uid=0 auid=0 ses=257743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648601.834:4243464): pid=23745 uid=0 auid=1055 ses=257742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648601.836:4243465): pid=23743 uid=0 auid=0 ses=257743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648601.837:4243466): pid=23745 uid=0 auid=1055 ses=257742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648601.848:4243467): pid=23744 uid=0 auid=0 ses=257744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648601.849:4243468): pid=23744 uid=0 auid=0 ses=257744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648601.879:4243469): pid=23743 uid=0 auid=0 ses=257743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648601.882:4243470): pid=23743 uid=0 auid=0 ses=257743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648602.321:4243471): pid=23745 uid=0 auid=1055 ses=257742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648602.328:4243472): pid=23745 uid=0 auid=1055 ses=257742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674648602.604:4243473): avc: denied { read append } for pid=23768 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674648602.604:4243473): avc: denied { open } for pid=23768 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648602.604:4243473): arch=c000003e syscall=2 success=yes exit=8 a0=55b240782a60 a1=402 a2=7ffdda17c8f0 a3=7ffdda17c360 items=0 ppid=5547 pid=23768 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648602.604:4243473): proctitle="dovecot/imap"
type=AVC msg=audit(1674648602.606:4243474): avc: denied { getattr } for pid=23768 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648602.606:4243474): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffdda17c850 a2=7ffdda17c850 a3=7ffdda17c2a0 items=0 ppid=5547 pid=23768 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648602.606:4243474): proctitle="dovecot/imap"
type=AVC msg=audit(1674648602.606:4243475): avc: denied { write } for pid=23768 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648602.606:4243475): arch=c000003e syscall=2 success=yes exit=10 a0=55b240787960 a1=2 a2=7ffdda17c5f0 a3=7ffdda17c0a0 items=0 ppid=5547 pid=23768 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648602.606:4243475): proctitle="dovecot/imap"
type=AVC msg=audit(1674648602.607:4243476): avc: denied { lock } for pid=23768 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648602.607:4243476): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffdda17c4f0 a3=63d11c1a items=0 ppid=5547 pid=23768 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648602.607:4243476): proctitle="dovecot/imap"
type=AVC msg=audit(1674648602.607:4243477): avc: denied { read } for pid=23768 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674648602.607:4243477): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55b2407b0300 a2=90800 a3=0 items=0 ppid=5547 pid=23768 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648602.607:4243477): proctitle="dovecot/imap"
type=AVC msg=audit(1674648602.608:4243478): avc: denied { getattr } for pid=23768 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648602.608:4243478): arch=c000003e syscall=4 success=yes exit=0 a0=55b240772a60 a1=7ffdda17c8a0 a2=7ffdda17c8a0 a3=6f632e6f72676173 items=0 ppid=5547 pid=23768 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648602.608:4243478): proctitle="dovecot/imap"
type=AVC msg=audit(1674648604.654:4243479): avc: denied { write } for pid=23779 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648604.654:4243479): avc: denied { add_name } for pid=23779 comm="imap" name="dovecot-uidlist.lock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648604.654:4243479): avc: denied { create } for pid=23779 comm="imap" name="dovecot-uidlist.lock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648604.654:4243479): arch=c000003e syscall=2 success=yes exit=13 a0=5583d3f925e0 a1=c2 a2=1b6 a3=63d11c1c items=0 ppid=5547 pid=23779 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648604.654:4243479): proctitle="dovecot/imap"
type=AVC msg=audit(1674648604.659:4243480): avc: denied { remove_name } for pid=23779 comm="imap" name="1674648308.M596258P22344.host.nexidigital.com,S=17824,W=18092" dev="vda1" ino=260272867 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674648604.659:4243480): avc: denied { rename } for pid=23779 comm="imap" name="1674648308.M596258P22344.host.nexidigital.com,S=17824,W=18092" dev="vda1" ino=260272867 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648604.659:4243480): arch=c000003e syscall=82 success=yes exit=0 a0=5583d3f92648 a1=5583d3f92ab0 a2=7f5ffc102c32 a3=7ffcdd259460 items=0 ppid=5547 pid=23779 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648604.659:4243480): proctitle="dovecot/imap"
type=AVC msg=audit(1674648604.661:4243481): avc: denied { unlink } for pid=23779 comm="imap" name="dovecot-uidlist.lock" dev="vda1" ino=29430837 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648604.661:4243481): arch=c000003e syscall=87 success=yes exit=0 a0=5583d4017c60 a1=7f5ffc4e0071 a2=2f9 a3=7ffcdd2596e0 items=0 ppid=5547 pid=23779 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648604.661:4243481): proctitle="dovecot/imap"
type=CRED_DISP msg=audit(1674648605.308:4243482): pid=23744 uid=0 auid=0 ses=257744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648605.311:4243483): pid=23744 uid=0 auid=0 ses=257744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674648625.600:4243484): avc: denied { write } for pid=23478 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674648625.600:4243484): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd4c415550 a2=6e a3=63d11c31 items=0 ppid=5547 pid=23478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648625.600:4243484): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674648661.333:4243485): pid=24041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648661.333:4243486): pid=24041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648661.335:4243487): pid=24041 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257745 res=1
type=USER_START msg=audit(1674648661.351:4243488): pid=24041 uid=0 auid=1055 ses=257745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648661.352:4243489): pid=24041 uid=0 auid=1055 ses=257745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648661.645:4243490): pid=24041 uid=0 auid=1055 ses=257745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648661.647:4243491): pid=24041 uid=0 auid=1055 ses=257745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674648717.552:4243492): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648717.552:4243493): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648717.552:4243494): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648718.461:4243495): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648718.461:4243496): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648718.461:4243497): pid=24281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24281 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674648718.464:4243498): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=24281 suid=74 rport=3370 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.13 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674648718.464:4243499): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=24281 suid=74 rport=3370 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.13 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648721.073:4243500): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24281 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648721.073:4243501): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24281 suid=74 rport=3370 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.13 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648721.074:4243502): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648721.075:4243503): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648721.075:4243504): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674648721.075:4243505): pid=24279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.105.128.13 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674648721.664:4243506): pid=24294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648721.664:4243507): pid=24294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648721.666:4243508): pid=24294 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257746 res=1
type=USER_START msg=audit(1674648721.684:4243509): pid=24294 uid=0 auid=1055 ses=257746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648721.685:4243510): pid=24294 uid=0 auid=1055 ses=257746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648721.993:4243511): pid=24294 uid=0 auid=1055 ses=257746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648721.995:4243512): pid=24294 uid=0 auid=1055 ses=257746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674648722.133:4243513): pid=24293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648722.133:4243514): pid=24293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674648722.133:4243515): pid=24293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24293 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674648782.009:4243517): pid=24554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648782.009:4243516): pid=24555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648782.009:4243518): pid=24555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648782.009:4243519): pid=24554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648782.009:4243521): pid=24555 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257748 res=1
type=LOGIN msg=audit(1674648782.009:4243520): pid=24554 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257747 res=1
type=USER_START msg=audit(1674648782.048:4243522): pid=24554 uid=0 auid=0 ses=257747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648782.049:4243523): pid=24555 uid=0 auid=1055 ses=257748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648782.050:4243524): pid=24555 uid=0 auid=1055 ses=257748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648782.051:4243525): pid=24554 uid=0 auid=0 ses=257747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648782.133:4243526): pid=24554 uid=0 auid=0 ses=257747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648782.134:4243527): pid=24554 uid=0 auid=0 ses=257747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648782.328:4243528): pid=24555 uid=0 auid=1055 ses=257748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648782.330:4243529): pid=24555 uid=0 auid=1055 ses=257748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648841.344:4243530): pid=24897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648841.345:4243531): pid=24897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648841.345:4243532): pid=24897 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257749 res=1
type=USER_START msg=audit(1674648841.357:4243533): pid=24897 uid=0 auid=1055 ses=257749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648841.358:4243534): pid=24897 uid=0 auid=1055 ses=257749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648841.616:4243535): pid=24897 uid=0 auid=1055 ses=257749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648841.618:4243536): pid=24897 uid=0 auid=1055 ses=257749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674648855.943:4243537): avc: denied { read } for pid=25039 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674648855.943:4243537): avc: denied { open } for pid=25039 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648855.943:4243537): arch=c000003e syscall=2 success=yes exit=18 a0=563bddbedf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=25039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648855.943:4243537): proctitle="dovecot/auth"
type=AVC msg=audit(1674648855.943:4243538): avc: denied { getattr } for pid=25039 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674648855.943:4243538): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc43287da0 a2=7ffc43287da0 a3=fffffc00 items=0 ppid=5547 pid=25039 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648855.943:4243538): proctitle="dovecot/auth"
type=AVC msg=audit(1674648858.898:4243539): avc: denied { name_connect } for pid=25039 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674648858.898:4243539): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc43287b90 a2=10 a3=7ffc43287b8c items=0 ppid=5547 pid=25039 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648858.898:4243539): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674648859.993:4243540): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674648859.993:4243540): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b0674b16010 items=0 ppid=25055 pid=25060 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648859.993:4243540): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132352E34362E33312E3433002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543132
type=AVC msg=audit(1674648861.415:4243541): avc: denied { write } for pid=25111 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674648861.415:4243541): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd8b5794f0 a2=6e a3=63d11d1d items=0 ppid=5547 pid=25111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648861.415:4243541): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674648873.533:4243542): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674648873.533:4243542): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b4dfe92e010 items=0 ppid=25262 pid=25267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674648873.533:4243542): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131332E3230342E3134382E313134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674648901.644:4243543): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648901.645:4243544): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648901.646:4243545): pid=25483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648901.646:4243546): pid=25483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648901.647:4243547): pid=25483 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257750 res=1
type=LOGIN msg=audit(1674648901.647:4243548): pid=25481 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257751 res=1
type=USER_ACCT msg=audit(1674648901.653:4243549): pid=25482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648901.654:4243550): pid=25482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648901.654:4243551): pid=25482 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257752 res=1
type=USER_ACCT msg=audit(1674648901.670:4243552): pid=25484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648901.670:4243553): pid=25484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648901.670:4243554): pid=25484 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257753 res=1
type=USER_START msg=audit(1674648901.841:4243555): pid=25483 uid=0 auid=0 ses=257750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648901.841:4243556): pid=25482 uid=0 auid=0 ses=257752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648901.841:4243557): pid=25484 uid=0 auid=1055 ses=257753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648901.870:4243558): pid=25483 uid=0 auid=0 ses=257750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674648901.872:4243559): pid=25481 uid=0 auid=0 ses=257751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648901.875:4243560): pid=25484 uid=0 auid=1055 ses=257753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648901.876:4243561): pid=25482 uid=0 auid=0 ses=257752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648901.895:4243562): pid=25481 uid=0 auid=0 ses=257751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648902.214:4243563): pid=25481 uid=0 auid=0 ses=257751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648902.262:4243564): pid=25481 uid=0 auid=0 ses=257751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648902.855:4243565): pid=25484 uid=0 auid=1055 ses=257753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648902.860:4243566): pid=25484 uid=0 auid=1055 ses=257753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648905.691:4243567): pid=25482 uid=0 auid=0 ses=257752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648905.692:4243568): pid=25482 uid=0 auid=0 ses=257752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648907.802:4243569): pid=25483 uid=0 auid=0 ses=257750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648907.804:4243570): pid=25483 uid=0 auid=0 ses=257750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674648961.824:4243571): pid=26007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674648961.824:4243572): pid=26007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674648961.826:4243573): pid=26007 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257754 res=1
type=USER_START msg=audit(1674648961.845:4243574): pid=26007 uid=0 auid=1055 ses=257754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674648961.848:4243575): pid=26007 uid=0 auid=1055 ses=257754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674648962.193:4243576): pid=26007 uid=0 auid=1055 ses=257754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674648962.195:4243577): pid=26007 uid=0 auid=1055 ses=257754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674649008.113:4243578): avc: denied { read } for pid=26286 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674649008.113:4243578): avc: denied { open } for pid=26286 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649008.113:4243578): arch=c000003e syscall=2 success=yes exit=18 a0=55d8ec79ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=26286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649008.113:4243578): proctitle="dovecot/auth"
type=AVC msg=audit(1674649008.113:4243579): avc: denied { getattr } for pid=26286 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649008.113:4243579): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd2bbaeb50 a2=7ffd2bbaeb50 a3=fffffc00 items=0 ppid=5547 pid=26286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649008.113:4243579): proctitle="dovecot/auth"
type=AVC msg=audit(1674649008.136:4243580): avc: denied { write } for pid=26289 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649008.136:4243580): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd3304e0d0 a2=6e a3=63d11db0 items=0 ppid=5547 pid=26289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649008.136:4243580): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674649008.306:4243581): avc: denied { read append } for pid=26285 comm="quota-status" name="maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674649008.306:4243581): avc: denied { open } for pid=26285 comm="quota-status" path="/home/remysagr/mail/remysagro.com/sales/maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649008.306:4243581): arch=c000003e syscall=2 success=yes exit=16 a0=5653edd2b280 a1=402 a2=7fff27f9c740 a3=7fb1e7f631c0 items=0 ppid=5547 pid=26285 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="quota-status" exe="/usr/libexec/dovecot/quota-status" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649008.306:4243581): proctitle=646F7665636F742F71756F74612D737461747573002D7000706F7374666978
type=AVC msg=audit(1674649013.033:4243582): avc: denied { getattr } for pid=26350 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649013.033:4243582): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffccf4b77b0 a2=7ffccf4b77b0 a3=7ffccf4b7220 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.033:4243582): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649013.034:4243583): avc: denied { write } for pid=26350 comm="lmtp" name="dovecot.index" dev="vda1" ino=33481563 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649013.034:4243583): arch=c000003e syscall=2 success=yes exit=18 a0=55fc9910fc30 a1=2 a2=7ffccf4b7550 a3=7ffccf4b6fe0 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.034:4243583): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649013.038:4243584): avc: denied { write } for pid=26350 comm="lmtp" name="tmp" dev="vda1" ino=260247868 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649013.038:4243584): avc: denied { add_name } for pid=26350 comm="lmtp" name="1674649013.M34922P26350.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649013.038:4243584): avc: denied { create } for pid=26350 comm="lmtp" name="1674649013.M34922P26350.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649013.038:4243584): arch=c000003e syscall=2 success=yes exit=21 a0=55fc99061968 a1=2c1 a2=1ff a3=7ffccf4b73e0 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.038:4243584): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649013.041:4243585): avc: denied { lock } for pid=26350 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649013.041:4243585): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffccf4b73e0 a3=63d11db5 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.041:4243585): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649013.042:4243586): avc: denied { remove_name } for pid=26350 comm="lmtp" name="1674649013.M34922P26350.host.nexidigital.com" dev="vda1" ino=260250888 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649013.042:4243586): avc: denied { rename } for pid=26350 comm="lmtp" name="1674649013.M34922P26350.host.nexidigital.com" dev="vda1" ino=260250888 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649013.042:4243586): arch=c000003e syscall=82 success=yes exit=0 a0=55fc9905e5e0 a1=55fc9905e640 a2=6988 a3=7ffccf4b7360 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.042:4243586): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649013.042:4243587): avc: denied { read } for pid=26350 comm="lmtp" name="new" dev="vda1" ino=256006826 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674649013.042:4243587): arch=c000003e syscall=2 success=yes exit=21 a0=55fc99132c90 a1=0 a2=0 a3=7ffccf4b7360 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.042:4243587): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649013.046:4243588): avc: denied { unlink } for pid=26350 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=33481525 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649013.046:4243588): arch=c000003e syscall=87 success=yes exit=0 a0=55fc9913e570 a1=7f76963d4071 a2=2f9 a3=7ffccf4b7460 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.046:4243588): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649013.048:4243589): avc: denied { link } for pid=26350 comm="lmtp" name=".temp.host.nexidigital.com.26350.349c6367127aeacd" dev="vda1" ino=33481525 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649013.048:4243589): arch=c000003e syscall=86 success=yes exit=0 a0=55fc99062030 a1=55fc99061f90 a2=1 a3=ffffff00 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.048:4243589): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649013.048:4243590): avc: denied { setattr } for pid=26350 comm="lmtp" name=".temp.host.nexidigital.com.26350.349c6367127aeacd" dev="vda1" ino=33481525 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649013.048:4243590): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=3f9 a3=37 items=0 ppid=5547 pid=26350 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649013.048:4243590): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674649021.217:4243591): pid=26396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649021.218:4243592): pid=26396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649021.218:4243593): pid=26396 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257755 res=1
type=USER_START msg=audit(1674649021.243:4243594): pid=26396 uid=0 auid=1055 ses=257755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649021.245:4243595): pid=26396 uid=0 auid=1055 ses=257755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649021.577:4243596): pid=26396 uid=0 auid=1055 ses=257755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649021.579:4243597): pid=26396 uid=0 auid=1055 ses=257755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674649081.605:4243598): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649081.605:4243599): pid=26909 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649081.605:4243600): pid=26909 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257756 res=1
type=USER_START msg=audit(1674649081.696:4243601): pid=26909 uid=0 auid=1055 ses=257756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649081.701:4243602): pid=26909 uid=0 auid=1055 ses=257756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649082.137:4243603): pid=26909 uid=0 auid=1055 ses=257756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649082.140:4243604): pid=26909 uid=0 auid=1055 ses=257756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674649086.879:4243605): avc: denied { name_connect } for pid=26286 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674649086.879:4243605): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd2bbae940 a2=10 a3=7ffd2bbae93c items=0 ppid=5547 pid=26286 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649086.879:4243605): proctitle="dovecot/auth"
type=AVC msg=audit(1674649086.919:4243606): avc: denied { write } for pid=26956 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649086.919:4243606): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffea826c2a0 a2=6e a3=63d11dfe items=0 ppid=5547 pid=26956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649086.919:4243606): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674649141.156:4243607): pid=27190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649141.157:4243608): pid=27190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649141.157:4243609): pid=27190 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257757 res=1
type=USER_START msg=audit(1674649141.168:4243610): pid=27190 uid=0 auid=1055 ses=257757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649141.169:4243611): pid=27190 uid=0 auid=1055 ses=257757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649141.459:4243612): pid=27190 uid=0 auid=1055 ses=257757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649141.461:4243613): pid=27190 uid=0 auid=1055 ses=257757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674649186.591:4243614): avc: denied { read } for pid=27452 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674649186.591:4243614): avc: denied { open } for pid=27452 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649186.591:4243614): arch=c000003e syscall=2 success=yes exit=18 a0=560c75f14f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=27452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649186.591:4243614): proctitle="dovecot/auth"
type=AVC msg=audit(1674649186.591:4243615): avc: denied { getattr } for pid=27452 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649186.591:4243615): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd311cdd60 a2=7ffd311cdd60 a3=fffffc00 items=0 ppid=5547 pid=27452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649186.591:4243615): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674649201.484:4243616): pid=27611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649201.484:4243617): pid=27611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674649201.484:4243618): pid=27614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649201.484:4243619): pid=27614 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649201.485:4243620): pid=27611 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257758 res=1
type=LOGIN msg=audit(1674649201.485:4243621): pid=27614 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257759 res=1
type=USER_ACCT msg=audit(1674649201.493:4243622): pid=27612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649201.494:4243623): pid=27612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649201.494:4243624): pid=27612 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257760 res=1
type=USER_ACCT msg=audit(1674649201.496:4243625): pid=27613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649201.496:4243626): pid=27613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649201.496:4243627): pid=27613 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257761 res=1
type=USER_START msg=audit(1674649201.578:4243628): pid=27614 uid=0 auid=1055 ses=257759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649201.579:4243629): pid=27612 uid=0 auid=0 ses=257760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649201.579:4243630): pid=27611 uid=0 auid=0 ses=257758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649201.582:4243631): pid=27612 uid=0 auid=0 ses=257760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649201.583:4243632): pid=27611 uid=0 auid=0 ses=257758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649201.583:4243633): pid=27614 uid=0 auid=1055 ses=257759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649201.583:4243634): pid=27613 uid=0 auid=0 ses=257761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649201.585:4243635): pid=27613 uid=0 auid=0 ses=257761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649201.627:4243636): pid=27611 uid=0 auid=0 ses=257758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649201.631:4243637): pid=27611 uid=0 auid=0 ses=257758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649201.810:4243638): pid=27613 uid=0 auid=0 ses=257761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649201.821:4243639): pid=27613 uid=0 auid=0 ses=257761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649202.067:4243640): pid=27614 uid=0 auid=1055 ses=257759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649202.094:4243641): pid=27614 uid=0 auid=1055 ses=257759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674649203.642:4243642): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674649203.642:4243642): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af811395010 items=0 ppid=1588 pid=27650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.642:4243642): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232302E3138302E3234392E3136352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A32343A3438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.647:4243643): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674649203.647:4243643): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b8cd9342010 items=0 ppid=1588 pid=27651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.647:4243643): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3232322E35312E32352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A32353A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.652:4243644): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674649203.652:4243644): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1991efa010 items=0 ppid=1588 pid=27652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.652:4243644): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131312E3132332E3234332E34392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A33303A3138002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.657:4243645): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674649203.657:4243645): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b493c449010 items=0 ppid=1588 pid=27653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.657:4243645): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E382E38372E3139302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A33303A3239002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.662:4243646): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674649203.662:4243646): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b599a5aa010 items=0 ppid=1588 pid=27654 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.662:4243646): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131302E3135372E32362E3130362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A33323A3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.667:4243647): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674649203.667:4243647): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1f615a9010 items=0 ppid=1588 pid=27655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.667:4243647): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131372E38382E34372E3232372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A34363A3030002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.671:4243648): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674649203.671:4243648): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac8a5d17010 items=0 ppid=1588 pid=27656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.671:4243648): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033362E3235312E3139352E3233302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A35303A3236002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.676:4243649): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674649203.676:4243649): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b3af9124010 items=0 ppid=1588 pid=27657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.676:4243649): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232302E3138392E3230392E31382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A35303A3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.681:4243650): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674649203.681:4243650): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b831378a010 items=0 ppid=1588 pid=27658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.681:4243650): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E3233392E3135302E3234362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A35303A3531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.686:4243651): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649203.686:4243651): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b13b515f010 items=0 ppid=1588 pid=27659 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.686:4243651): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730038372E3234362E372E3232392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431313A35343A3038002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.690:4243652): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649203.690:4243652): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad29903d010 items=0 ppid=1588 pid=27660 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.690:4243652): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E32372E3134382E31342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A30323A3035002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.694:4243653): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674649203.694:4243653): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b37fd01c010 items=0 ppid=1588 pid=27661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.694:4243653): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132332E3233342E33312E39302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A30353A3537002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649203.698:4243654): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649203.698:4243654): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1f9d3a5010 items=0 ppid=1588 pid=27662 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649203.698:4243654): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231332E33322E3235352E39342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A31383A3538002D6A0044524F50
type=CRED_DISP msg=audit(1674649204.975:4243655): pid=27612 uid=0 auid=0 ses=257760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649204.977:4243656): pid=27612 uid=0 auid=0 ses=257760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674649252.763:4243657): avc: denied { name_connect } for pid=27452 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674649252.763:4243657): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd311cdb50 a2=10 a3=7ffd311cdb4c items=0 ppid=5547 pid=27452 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649252.763:4243657): proctitle="dovecot/auth"
type=AVC msg=audit(1674649252.794:4243658): avc: denied { write } for pid=27926 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649252.794:4243658): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffec12cca90 a2=6e a3=63d11ea4 items=0 ppid=5547 pid=27926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649252.794:4243658): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674649262.003:4243659): pid=27988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649262.004:4243660): pid=27988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649262.005:4243661): pid=27988 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257762 res=1
type=USER_START msg=audit(1674649262.064:4243662): pid=27988 uid=0 auid=1055 ses=257762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649262.076:4243663): pid=27988 uid=0 auid=1055 ses=257762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649262.527:4243664): pid=27988 uid=0 auid=1055 ses=257762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649262.534:4243665): pid=27988 uid=0 auid=1055 ses=257762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674649262.932:4243666): avc: denied { write } for pid=27926 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649262.932:4243666): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffec12cca90 a2=6e a3=63d11eae items=0 ppid=5547 pid=27926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649262.932:4243666): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674649265.147:4243667): pid=28012 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.147:4243668): pid=28012 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.148:4243669): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.168:4243670): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.171:4243671): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.172:4243672): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.195:4243673): pid=28017 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.195:4243674): pid=28017 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.196:4243675): pid=28017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.208:4243676): pid=28017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.211:4243677): pid=28017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.211:4243678): pid=28017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.231:4243679): pid=28022 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.231:4243680): pid=28022 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.231:4243681): pid=28022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.244:4243682): pid=28022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.248:4243683): pid=28022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.248:4243684): pid=28022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.367:4243685): pid=28030 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.367:4243686): pid=28030 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.368:4243687): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.382:4243688): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.385:4243689): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.385:4243690): pid=28030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.408:4243691): pid=28035 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.408:4243692): pid=28035 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.409:4243693): pid=28035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.421:4243694): pid=28035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.424:4243695): pid=28035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.424:4243696): pid=28035 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.444:4243697): pid=28040 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.444:4243698): pid=28040 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.445:4243699): pid=28040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.457:4243700): pid=28040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.461:4243701): pid=28040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.461:4243702): pid=28040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.491:4243703): pid=28045 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.491:4243704): pid=28045 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.491:4243705): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.504:4243706): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.506:4243707): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.507:4243708): pid=28045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.527:4243709): pid=28050 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.527:4243710): pid=28050 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.528:4243711): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.540:4243712): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.543:4243713): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.543:4243714): pid=28050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.562:4243715): pid=28055 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.563:4243716): pid=28055 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.563:4243717): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.576:4243718): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.580:4243719): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.580:4243720): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.600:4243721): pid=28059 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.601:4243722): pid=28059 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.601:4243723): pid=28059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.615:4243724): pid=28059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.619:4243725): pid=28059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.619:4243726): pid=28059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649265.639:4243727): pid=28065 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649265.640:4243728): pid=28065 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674649265.640:4243729): pid=28065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649265.654:4243730): pid=28065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649265.657:4243731): pid=28065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649265.657:4243732): pid=28065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649267.767:4243733): pid=28079 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649267.768:4243734): pid=28079 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674649267.768:4243735): pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649267.783:4243736): pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649267.847:4243737): pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649267.847:4243738): pid=28079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649267.882:4243739): pid=28087 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649267.882:4243740): pid=28087 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674649267.883:4243741): pid=28087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649267.902:4243742): pid=28087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649268.002:4243743): pid=28087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649268.002:4243744): pid=28087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649268.030:4243745): pid=28093 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649268.030:4243746): pid=28093 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674649268.031:4243747): pid=28093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649268.052:4243748): pid=28093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649268.195:4243749): pid=28093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649268.195:4243750): pid=28093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649268.237:4243751): pid=28100 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649268.238:4243752): pid=28100 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674649268.238:4243753): pid=28100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649268.253:4243754): pid=28100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649268.257:4243755): pid=28100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649268.257:4243756): pid=28100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649268.283:4243757): pid=28104 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649268.283:4243758): pid=28104 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D435857686561334462576948737A6A442E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674649268.283:4243759): pid=28104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649268.300:4243760): pid=28104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649268.303:4243761): pid=28104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649268.304:4243762): pid=28104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649268.327:4243763): pid=28108 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649268.327:4243764): pid=28108 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D435857686561334462576948737A6A442E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674649268.327:4243765): pid=28108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649268.342:4243766): pid=28108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649268.347:4243767): pid=28108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649268.348:4243768): pid=28108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649268.373:4243769): pid=28114 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649268.373:4243770): pid=28114 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D435857686561334462576948737A6A442E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674649268.374:4243771): pid=28114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649268.388:4243772): pid=28114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649268.392:4243773): pid=28114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649268.392:4243774): pid=28114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649268.418:4243775): pid=28119 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649268.418:4243776): pid=28119 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674649268.418:4243777): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649268.433:4243778): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649268.439:4243779): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649268.439:4243780): pid=28119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649273.467:4243781): pid=28146 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649273.467:4243782): pid=28146 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674649273.467:4243783): pid=28146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649273.490:4243784): pid=28146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649273.495:4243785): pid=28146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649273.495:4243786): pid=28146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649274.045:4243787): pid=28159 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649274.046:4243788): pid=28159 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674649274.046:4243789): pid=28159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649274.066:4243790): pid=28159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649274.070:4243791): pid=28159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649274.070:4243792): pid=28159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649274.095:4243793): pid=28163 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649274.095:4243794): pid=28163 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674649274.095:4243795): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649274.111:4243796): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649274.115:4243797): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649274.116:4243798): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649274.140:4243799): pid=28168 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649274.140:4243800): pid=28168 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674649274.141:4243801): pid=28168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649274.161:4243802): pid=28168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649274.165:4243803): pid=28168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649274.165:4243804): pid=28168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649274.199:4243805): pid=28174 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649274.199:4243806): pid=28174 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674649274.200:4243807): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649274.218:4243808): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649274.413:4243809): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649274.413:4243810): pid=28174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649275.272:4243811): pid=28182 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649275.272:4243812): pid=28182 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674649275.273:4243813): pid=28182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649275.288:4243814): pid=28182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649275.346:4243815): pid=28182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649275.346:4243816): pid=28182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649275.381:4243817): pid=28188 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649275.381:4243818): pid=28188 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674649275.381:4243819): pid=28188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649275.396:4243820): pid=28188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649276.597:4243821): pid=28188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649276.597:4243822): pid=28188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649276.792:4243823): pid=28206 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649276.793:4243824): pid=28206 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674649276.793:4243825): pid=28206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649276.806:4243826): pid=28206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649278.056:4243827): pid=28206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649278.057:4243828): pid=28206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649278.309:4243829): pid=28226 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649278.309:4243830): pid=28226 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674649278.310:4243831): pid=28226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649278.330:4243832): pid=28226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649280.428:4243833): pid=28226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649280.428:4243834): pid=28226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649280.673:4243835): pid=28245 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649280.673:4243836): pid=28245 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674649280.673:4243837): pid=28245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649280.687:4243838): pid=28245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649281.881:4243839): pid=28245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649281.881:4243840): pid=28245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649281.986:4243841): pid=28258 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649281.986:4243842): pid=28258 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674649281.986:4243843): pid=28258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649282.006:4243844): pid=28258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649282.554:4243845): pid=28258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649282.554:4243846): pid=28258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649282.708:4243847): pid=28268 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649282.708:4243848): pid=28268 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674649282.708:4243849): pid=28268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649282.730:4243850): pid=28268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649284.918:4243851): pid=28268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649284.919:4243852): pid=28268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1674649285.078:4243853): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649285.078:4243853): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b681432c010 items=0 ppid=28291 pid=28296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649285.078:4243853): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3234392E3134382E313430002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674649285.181:4243854): pid=28297 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649285.182:4243855): pid=28297 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F55474F43524D2F75676F5F626C672026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F55474F43524D2F75676F5F626C67202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674649285.182:4243856): pid=28297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649285.200:4243857): pid=28297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649286.337:4243858): pid=28297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649286.337:4243859): pid=28297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649286.537:4243860): pid=28333 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649286.537:4243861): pid=28333 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674649286.537:4243862): pid=28333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649286.551:4243863): pid=28333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649287.662:4243864): pid=28333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649287.662:4243865): pid=28333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649288.513:4243866): pid=28348 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674649288.513:4243867): pid=28348 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674649288.514:4243868): pid=28348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674649288.527:4243869): pid=28348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674649289.616:4243870): pid=28348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674649289.616:4243871): pid=28348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674649321.554:4243872): pid=28518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649321.554:4243873): pid=28518 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649321.557:4243874): pid=28518 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257763 res=1
type=USER_START msg=audit(1674649321.574:4243875): pid=28518 uid=0 auid=1055 ses=257763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649321.576:4243876): pid=28518 uid=0 auid=1055 ses=257763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649321.847:4243877): pid=28518 uid=0 auid=1055 ses=257763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649321.849:4243878): pid=28518 uid=0 auid=1055 ses=257763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649357.114:4243879): pid=28690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649357.114:4243880): pid=28690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649357.115:4243881): pid=28690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649357.362:4243882): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28690 suid=74 rport=43166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649357.363:4243883): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28690 suid=74 rport=43166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649358.413:4243884): pid=28699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649358.413:4243885): pid=28699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649358.413:4243886): pid=28699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28699 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674649358.465:4243887): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.131.29.54 addr=43.131.29.54 terminal=ssh res=failed'
type=CRYPTO_SESSION msg=audit(1674649358.634:4243888): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=28699 suid=74 rport=32928 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.127.253.106 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649358.634:4243889): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=28699 suid=74 rport=32928 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.127.253.106 terminal=? res=success'
type=USER_AUTH msg=audit(1674649359.835:4243890): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649360.095:4243891): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28690 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649360.096:4243892): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28690 suid=74 rport=43166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649360.098:4243893): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649360.098:4243894): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649360.098:4243895): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28689 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649360.098:4243896): pid=28689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649361.222:4243897): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28699 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649361.222:4243898): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28699 suid=74 rport=32928 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.127.253.106 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649361.224:4243899): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649361.224:4243900): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649361.224:4243901): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649361.224:4243902): pid=28695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.127.253.106 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649368.834:4243903): pid=28774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649368.834:4243904): pid=28774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649368.834:4243905): pid=28774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649369.080:4243906): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=28774 suid=74 rport=60060 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649369.080:4243907): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=28774 suid=74 rport=60060 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=USER_AUTH msg=audit(1674649370.124:4243908): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=111.238.174.6 addr=111.238.174.6 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649371.472:4243909): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649371.708:4243910): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28774 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649371.708:4243911): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28774 suid=74 rport=60060 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649371.710:4243912): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649371.710:4243913): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649371.710:4243914): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649371.710:4243915): pid=28773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=ssh res=failed'
type=AVC msg=audit(1674649373.223:4243916): avc: denied { read append } for pid=28797 comm="quota-status" name="maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674649373.223:4243916): avc: denied { open } for pid=28797 comm="quota-status" path="/home/remysagr/mail/remysagro.com/sales/maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649373.223:4243916): arch=c000003e syscall=2 success=yes exit=16 a0=55c31d4b6280 a1=402 a2=7ffdfe71eb10 a3=7f73913a91c0 items=0 ppid=5547 pid=28797 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="quota-status" exe="/usr/libexec/dovecot/quota-status" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649373.223:4243916): proctitle=646F7665636F742F71756F74612D737461747573002D7000706F7374666978
type=AVC msg=audit(1674649375.973:4243917): avc: denied { write } for pid=28798 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649375.973:4243917): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff8b92e680 a2=6e a3=63d11f1f items=0 ppid=5547 pid=28798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649375.973:4243917): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674649375.988:4243918): avc: denied { getattr } for pid=28816 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649375.988:4243918): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffe6b8b5960 a2=7ffe6b8b5960 a3=7ffe6b8b53e0 items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649375.988:4243918): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649375.988:4243919): avc: denied { write } for pid=28816 comm="lmtp" name="dovecot.index" dev="vda1" ino=33481563 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649375.988:4243919): arch=c000003e syscall=2 success=yes exit=18 a0=55ed8308fc30 a1=2 a2=7ffe6b8b5700 a3=7ffe6b8b51a0 items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649375.988:4243919): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649375.993:4243920): avc: denied { write } for pid=28816 comm="lmtp" name="tmp" dev="vda1" ino=260247868 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649375.993:4243920): avc: denied { add_name } for pid=28816 comm="lmtp" name="1674649375.M988084P28816.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649375.993:4243920): avc: denied { create } for pid=28816 comm="lmtp" name="1674649375.M988084P28816.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649375.993:4243920): arch=c000003e syscall=2 success=yes exit=21 a0=55ed82fd9970 a1=2c1 a2=1ff a3=7ffe6b8b55a0 items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649375.993:4243920): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649375.997:4243921): avc: denied { lock } for pid=28816 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649375.997:4243921): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffe6b8b5590 a3=63d11f1f items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649375.997:4243921): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649375.998:4243922): avc: denied { remove_name } for pid=28816 comm="lmtp" name="1674649375.M988084P28816.host.nexidigital.com" dev="vda1" ino=260254341 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649375.998:4243922): avc: denied { rename } for pid=28816 comm="lmtp" name="1674649375.M988084P28816.host.nexidigital.com" dev="vda1" ino=260254341 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649375.998:4243922): arch=c000003e syscall=82 success=yes exit=0 a0=55ed82fd65e0 a1=55ed82fd6640 a2=6988 a3=7ffe6b8b5520 items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649375.998:4243922): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649375.998:4243923): avc: denied { read } for pid=28816 comm="lmtp" name="new" dev="vda1" ino=256006826 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674649375.998:4243923): arch=c000003e syscall=2 success=yes exit=21 a0=55ed830b2c90 a1=0 a2=0 a3=7ffe6b8b5520 items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649375.998:4243923): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649376.001:4243924): avc: denied { unlink } for pid=28816 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=33481561 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649376.001:4243924): arch=c000003e syscall=87 success=yes exit=0 a0=55ed830b0820 a1=7fe5b9653071 a2=2f9 a3=7ffe6b8b5620 items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649376.001:4243924): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649376.003:4243925): avc: denied { link } for pid=28816 comm="lmtp" name=".temp.host.nexidigital.com.28816.7c1fdb3f7b18b044" dev="vda1" ino=33481561 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649376.003:4243925): arch=c000003e syscall=86 success=yes exit=0 a0=55ed82fda038 a1=55ed82fd9f98 a2=1 a3=63d11f20 items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649376.003:4243925): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674649376.003:4243926): avc: denied { setattr } for pid=28816 comm="lmtp" name=".temp.host.nexidigital.com.28816.7c1fdb3f7b18b044" dev="vda1" ino=33481561 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649376.003:4243926): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=3f9 a3=37 items=0 ppid=5547 pid=28816 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649376.003:4243926): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674649381.870:4243927): pid=28836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649381.871:4243928): pid=28836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649381.871:4243929): pid=28836 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257764 res=1
type=USER_START msg=audit(1674649381.891:4243930): pid=28836 uid=0 auid=1055 ses=257764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649381.893:4243931): pid=28836 uid=0 auid=1055 ses=257764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649382.178:4243932): pid=28836 uid=0 auid=1055 ses=257764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649382.181:4243933): pid=28836 uid=0 auid=1055 ses=257764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649397.392:4243934): pid=28905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649397.393:4243935): pid=28905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649397.393:4243936): pid=28905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28905 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649397.632:4243937): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=28905 suid=74 rport=51983 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.99.161.113 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649397.632:4243938): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=28905 suid=74 rport=51983 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.99.161.113 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649398.756:4243939): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28905 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649398.756:4243940): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28905 suid=74 rport=51983 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.99.161.113 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649398.757:4243941): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649398.757:4243942): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649398.757:4243943): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649398.757:4243944): pid=28902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.99.161.113 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649410.024:4243945): pid=28981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649410.024:4243946): pid=28981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649410.024:4243947): pid=28981 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28981 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649410.084:4243948): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28981 suid=74 rport=36136 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649410.084:4243949): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28981 suid=74 rport=36136 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=USER_AUTH msg=audit(1674649410.396:4243950): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.82.241.69 addr=103.82.241.69 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649412.572:4243951): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649412.625:4243952): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28981 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649412.625:4243953): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28981 suid=74 rport=36136 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649412.626:4243954): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649412.626:4243955): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649412.626:4243956): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649412.626:4243957): pid=28980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674649441.197:4243958): pid=29106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649441.197:4243959): pid=29106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649441.198:4243960): pid=29106 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257765 res=1
type=USER_START msg=audit(1674649441.213:4243961): pid=29106 uid=0 auid=1055 ses=257765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649441.216:4243962): pid=29106 uid=0 auid=1055 ses=257765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649441.498:4243963): pid=29106 uid=0 auid=1055 ses=257765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649441.500:4243964): pid=29106 uid=0 auid=1055 ses=257765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649449.585:4243965): pid=29148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649449.585:4243966): pid=29148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649449.585:4243967): pid=29148 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29148 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649449.838:4243968): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29148 suid=74 rport=56830 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649449.838:4243969): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29148 suid=74 rport=56830 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=USER_AUTH msg=audit(1674649450.953:4243970): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=167.71.7.226 addr=167.71.7.226 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649452.619:4243971): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649452.874:4243972): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29148 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649452.874:4243973): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29148 suid=74 rport=56830 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649452.876:4243974): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649452.876:4243975): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649452.876:4243976): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29147 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649452.876:4243977): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649456.338:4243978): pid=29173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649456.339:4243979): pid=29173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649456.339:4243980): pid=29173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649456.495:4243981): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29173 suid=74 rport=46792 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649456.495:4243982): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29173 suid=74 rport=46792 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=USER_AUTH msg=audit(1674649457.219:4243983): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=202.170.60.201 addr=202.170.60.201 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649459.179:4243984): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649459.337:4243985): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29173 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649459.337:4243986): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29173 suid=74 rport=46792 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649459.338:4243987): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649459.338:4243988): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649459.338:4243989): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29172 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649459.338:4243990): pid=29172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649499.157:4243991): pid=29372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649499.157:4243992): pid=29372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649499.157:4243993): pid=29372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649499.390:4243994): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29372 suid=74 rport=52126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649499.390:4243995): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29372 suid=74 rport=52126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=USER_AUTH msg=audit(1674649500.425:4243996): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=157.230.1.224 addr=157.230.1.224 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674649501.518:4243997): pid=29384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674649501.518:4243998): pid=29383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649501.518:4243999): pid=29384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674649501.518:4244000): pid=29382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649501.518:4244001): pid=29383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649501.518:4244002): pid=29382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649501.518:4244003): pid=29384 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257766 res=1
type=LOGIN msg=audit(1674649501.518:4244004): pid=29383 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257767 res=1
type=LOGIN msg=audit(1674649501.518:4244005): pid=29382 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257768 res=1
type=USER_START msg=audit(1674649501.577:4244006): pid=29383 uid=0 auid=0 ses=257767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649501.577:4244007): pid=29382 uid=0 auid=0 ses=257768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649501.585:4244008): pid=29383 uid=0 auid=0 ses=257767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649501.586:4244009): pid=29384 uid=0 auid=1055 ses=257766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649501.588:4244010): pid=29382 uid=0 auid=0 ses=257768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649501.589:4244011): pid=29384 uid=0 auid=1055 ses=257766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649501.838:4244012): pid=29382 uid=0 auid=0 ses=257768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649501.857:4244013): pid=29382 uid=0 auid=0 ses=257768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649501.974:4244014): pid=29384 uid=0 auid=1055 ses=257766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649501.977:4244015): pid=29384 uid=0 auid=1055 ses=257766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674649502.628:4244016): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649502.868:4244017): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29372 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649502.868:4244018): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29372 suid=74 rport=52126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649502.870:4244019): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649502.871:4244020): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649502.871:4244021): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29371 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649502.871:4244022): pid=29371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674649504.994:4244023): pid=29383 uid=0 auid=0 ses=257767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649504.998:4244024): pid=29383 uid=0 auid=0 ses=257767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674649509.384:4244025): avc: denied { read } for pid=29434 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674649509.384:4244025): avc: denied { open } for pid=29434 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649509.384:4244025): arch=c000003e syscall=2 success=yes exit=18 a0=556f28616f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=29434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649509.384:4244025): proctitle="dovecot/auth"
type=AVC msg=audit(1674649509.384:4244026): avc: denied { getattr } for pid=29434 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649509.384:4244026): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe51e3f9c0 a2=7ffe51e3f9c0 a3=fffffc00 items=0 ppid=5547 pid=29434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649509.384:4244026): proctitle="dovecot/auth"
type=AVC msg=audit(1674649509.790:4244027): avc: denied { name_connect } for pid=29434 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674649509.790:4244027): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe51e3f7b0 a2=10 a3=7ffe51e3f7ac items=0 ppid=5547 pid=29434 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649509.790:4244027): proctitle="dovecot/auth"
type=AVC msg=audit(1674649509.818:4244028): avc: denied { write } for pid=29437 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649509.818:4244028): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5e631f50 a2=6e a3=63d11fa5 items=0 ppid=5547 pid=29437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649509.818:4244028): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674649510.130:4244029): avc: denied { read append } for pid=29439 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674649510.130:4244029): avc: denied { open } for pid=29439 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649510.130:4244029): arch=c000003e syscall=2 success=yes exit=8 a0=55d912b04a60 a1=402 a2=7ffebace3970 a3=7ffebace33e0 items=0 ppid=5547 pid=29439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649510.130:4244029): proctitle="dovecot/imap"
type=AVC msg=audit(1674649510.130:4244030): avc: denied { getattr } for pid=29439 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649510.130:4244030): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffebace38d0 a2=7ffebace38d0 a3=7ffebace3320 items=0 ppid=5547 pid=29439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649510.130:4244030): proctitle="dovecot/imap"
type=AVC msg=audit(1674649510.130:4244031): avc: denied { write } for pid=29439 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649510.130:4244031): arch=c000003e syscall=2 success=yes exit=10 a0=55d912b09960 a1=2 a2=7ffebace3670 a3=7ffebace3120 items=0 ppid=5547 pid=29439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649510.130:4244031): proctitle="dovecot/imap"
type=AVC msg=audit(1674649510.131:4244032): avc: denied { lock } for pid=29439 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649510.131:4244032): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffebace3570 a3=63d11fa6 items=0 ppid=5547 pid=29439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649510.131:4244032): proctitle="dovecot/imap"
type=AVC msg=audit(1674649510.131:4244033): avc: denied { read } for pid=29439 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674649510.131:4244033): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55d912b32300 a2=90800 a3=0 items=0 ppid=5547 pid=29439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649510.131:4244033): proctitle="dovecot/imap"
type=AVC msg=audit(1674649510.132:4244034): avc: denied { getattr } for pid=29439 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649510.132:4244034): arch=c000003e syscall=4 success=yes exit=0 a0=55d912af4a60 a1=7ffebace3920 a2=7ffebace3920 a3=6f632e6f72676173 items=0 ppid=5547 pid=29439 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649510.132:4244034): proctitle="dovecot/imap"
type=AVC msg=audit(1674649511.579:4244035): avc: denied { write } for pid=29507 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649511.579:4244035): avc: denied { add_name } for pid=29507 comm="imap" name="dovecot-uidlist.lock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649511.579:4244035): avc: denied { create } for pid=29507 comm="imap" name="dovecot-uidlist.lock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649511.579:4244035): arch=c000003e syscall=2 success=yes exit=13 a0=555eb80b75e0 a1=c2 a2=1b6 a3=63d11fa7 items=0 ppid=5547 pid=29507 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649511.579:4244035): proctitle="dovecot/imap"
type=AVC msg=audit(1674649511.583:4244036): avc: denied { read } for pid=29507 comm="imap" name="new" dev="vda1" ino=256006826 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674649511.583:4244036): arch=c000003e syscall=257 success=yes exit=16 a0=ffffffffffffff9c a1=555eb80b7520 a2=90800 a3=0 items=0 ppid=5547 pid=29507 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649511.583:4244036): proctitle="dovecot/imap"
type=AVC msg=audit(1674649511.583:4244037): avc: denied { remove_name } for pid=29507 comm="imap" name="1674649013.M34922P26350.host.nexidigital.com,S=24958,W=25326" dev="vda1" ino=260250888 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674649511.583:4244037): avc: denied { rename } for pid=29507 comm="imap" name="1674649013.M34922P26350.host.nexidigital.com,S=24958,W=25326" dev="vda1" ino=260250888 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649511.583:4244037): arch=c000003e syscall=82 success=yes exit=0 a0=555eb80b7648 a1=555eb80b7ab0 a2=7fc37a892c32 a3=7fff772e4ea0 items=0 ppid=5547 pid=29507 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649511.583:4244037): proctitle="dovecot/imap"
type=AVC msg=audit(1674649511.585:4244038): avc: denied { unlink } for pid=29507 comm="imap" name="dovecot-uidlist.lock" dev="vda1" ino=33481525 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649511.585:4244038): arch=c000003e syscall=87 success=yes exit=0 a0=555eb813cc60 a1=7fc37ac6e071 a2=2f9 a3=7fff772e5120 items=0 ppid=5547 pid=29507 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649511.585:4244038): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674649562.023:4244039): pid=29765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649562.024:4244040): pid=29765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649562.024:4244041): pid=29765 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257769 res=1
type=USER_START msg=audit(1674649562.044:4244042): pid=29765 uid=0 auid=1055 ses=257769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649562.047:4244043): pid=29765 uid=0 auid=1055 ses=257769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649562.313:4244044): pid=29765 uid=0 auid=1055 ses=257769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649562.316:4244045): pid=29765 uid=0 auid=1055 ses=257769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649571.035:4244046): pid=29806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649571.035:4244047): pid=29806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649571.035:4244048): pid=29806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29806 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649571.253:4244049): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29806 suid=74 rport=54478 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649571.253:4244050): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29806 suid=74 rport=54478 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=USER_AUTH msg=audit(1674649572.232:4244051): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=109.206.253.33 addr=109.206.253.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649574.313:4244052): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649574.536:4244053): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29806 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649574.536:4244054): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29806 suid=74 rport=54478 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649574.537:4244055): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649574.537:4244056): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649574.537:4244057): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649574.537:4244058): pid=29805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649594.888:4244059): pid=29998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649594.888:4244060): pid=29998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649594.888:4244061): pid=29998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649595.142:4244062): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=29998 suid=74 rport=40328 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649595.142:4244063): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=29998 suid=74 rport=40328 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=USER_AUTH msg=audit(1674649596.285:4244064): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=111.238.174.6 addr=111.238.174.6 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649598.328:4244065): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649598.579:4244066): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29998 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649598.579:4244067): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29998 suid=74 rport=40328 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649598.581:4244068): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649598.581:4244069): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649598.581:4244070): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29996 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649598.581:4244071): pid=29996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674649621.335:4244072): pid=30159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649621.335:4244073): pid=30159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649621.335:4244074): pid=30159 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257770 res=1
type=USER_START msg=audit(1674649621.365:4244075): pid=30159 uid=0 auid=1055 ses=257770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649621.367:4244076): pid=30159 uid=0 auid=1055 ses=257770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649621.789:4244077): pid=30159 uid=0 auid=1055 ses=257770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649621.791:4244078): pid=30159 uid=0 auid=1055 ses=257770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649649.073:4244079): pid=30348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649649.073:4244080): pid=30348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649649.073:4244081): pid=30348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649649.327:4244082): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=30348 suid=74 rport=51722 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649649.327:4244083): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=30348 suid=74 rport=51722 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=USER_AUTH msg=audit(1674649650.444:4244084): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=111.238.174.6 addr=111.238.174.6 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649652.566:4244085): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649652.811:4244086): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30348 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649652.811:4244087): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30348 suid=74 rport=51722 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649652.813:4244088): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649652.813:4244089): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649652.813:4244090): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649652.813:4244091): pid=30346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=111.238.174.6 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649655.036:4244092): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649655.036:4244092): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbf1560f010 items=0 ppid=30381 pid=30384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649655.036:4244092): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649655.040:4244093): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649655.040:4244093): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe59d370010 items=0 ppid=30381 pid=30385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649655.040:4244093): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649655.045:4244094): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649655.045:4244094): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f33b744e010 items=0 ppid=30381 pid=30386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649655.045:4244094): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649655.050:4244095): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649655.050:4244095): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd7be440010 items=0 ppid=30381 pid=30387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649655.050:4244095): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674649655.376:4244096): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649655.376:4244096): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f33596fe010 items=0 ppid=30381 pid=30396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649655.376:4244096): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003133382E39392E3139362E313033002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649655.384:4244097): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649655.384:4244097): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f39b1a40010 items=0 ppid=30381 pid=30397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649655.384:4244097): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003133382E39392E3139362E313033002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649655.391:4244098): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674649655.391:4244098): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff4865e4010 items=0 ppid=30381 pid=30398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649655.391:4244098): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003131312E3233382E3137342E36002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649655.398:4244099): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649655.398:4244099): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb5b0a4a010 items=0 ppid=30381 pid=30399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649655.398:4244099): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003131312E3233382E3137342E36002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674649681.812:4244100): pid=30506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674649681.813:4244101): pid=30507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649681.813:4244102): pid=30506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649681.813:4244103): pid=30507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649681.814:4244104): pid=30507 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257771 res=1
type=LOGIN msg=audit(1674649681.814:4244105): pid=30506 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257772 res=1
type=USER_START msg=audit(1674649681.850:4244106): pid=30506 uid=0 auid=0 ses=257772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649681.851:4244107): pid=30507 uid=0 auid=1055 ses=257771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649681.852:4244108): pid=30507 uid=0 auid=1055 ses=257771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649681.853:4244109): pid=30506 uid=0 auid=0 ses=257772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649681.912:4244110): pid=30506 uid=0 auid=0 ses=257772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649681.915:4244111): pid=30506 uid=0 auid=0 ses=257772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649682.113:4244112): pid=30507 uid=0 auid=1055 ses=257771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649682.115:4244113): pid=30507 uid=0 auid=1055 ses=257771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649685.208:4244114): pid=30536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649685.208:4244115): pid=30536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649685.208:4244116): pid=30536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649685.466:4244117): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30536 suid=74 rport=43264 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649685.466:4244118): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30536 suid=74 rport=43264 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=? res=success'
type=USER_AUTH msg=audit(1674649686.573:4244119): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.131.29.54 addr=43.131.29.54 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649688.639:4244120): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649688.896:4244121): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30536 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649688.896:4244122): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30536 suid=74 rport=43264 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649688.897:4244123): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649688.897:4244124): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649688.897:4244125): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649688.897:4244126): pid=30535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=ssh res=failed'
type=AVC msg=audit(1674649691.805:4244127): avc: denied { read } for pid=30563 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674649691.805:4244127): avc: denied { open } for pid=30563 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649691.805:4244127): arch=c000003e syscall=2 success=yes exit=18 a0=556f5234ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649691.805:4244127): proctitle="dovecot/auth"
type=AVC msg=audit(1674649691.806:4244128): avc: denied { getattr } for pid=30563 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649691.806:4244128): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffedea6e110 a2=7ffedea6e110 a3=fffffc00 items=0 ppid=5547 pid=30563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649691.806:4244128): proctitle="dovecot/auth"
type=AVC msg=audit(1674649694.876:4244129): avc: denied { name_connect } for pid=30563 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674649694.876:4244129): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffedea6df00 a2=10 a3=7ffedea6defc items=0 ppid=5547 pid=30563 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649694.876:4244129): proctitle="dovecot/auth"
type=AVC msg=audit(1674649694.918:4244130): avc: denied { write } for pid=30575 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649694.918:4244130): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc32518f40 a2=6e a3=63d1205e items=0 ppid=5547 pid=30575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649694.918:4244130): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674649708.325:4244131): avc: denied { name_connect } for pid=30563 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674649708.325:4244131): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffedea6df00 a2=10 a3=7ffedea6defc items=0 ppid=5547 pid=30563 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649708.325:4244131): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674649721.419:4244132): pid=30673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649721.419:4244133): pid=30673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649721.420:4244134): pid=30673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649721.660:4244135): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30673 suid=74 rport=56330 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649721.661:4244136): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30673 suid=74 rport=56330 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649722.422:4244137): pid=30676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649722.422:4244138): pid=30676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649722.422:4244139): pid=30676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649722.702:4244140): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30676 suid=74 rport=39884 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649722.702:4244141): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30676 suid=74 rport=39884 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=USER_AUTH msg=audit(1674649722.737:4244142): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=167.71.7.226 addr=167.71.7.226 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649723.967:4244143): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=157.230.1.224 addr=157.230.1.224 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649725.411:4244144): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649725.656:4244145): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30673 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649725.657:4244146): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30673 suid=74 rport=56330 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649725.658:4244147): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649725.658:4244148): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649725.658:4244149): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649725.658:4244150): pid=30672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649726.445:4244151): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649726.746:4244152): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30676 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649726.746:4244153): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30676 suid=74 rport=39884 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649726.748:4244154): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649726.748:4244155): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649726.748:4244156): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30675 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649726.748:4244157): pid=30675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674649741.130:4244158): pid=30728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649741.131:4244159): pid=30728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649741.131:4244160): pid=30728 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257773 res=1
type=USER_START msg=audit(1674649741.149:4244161): pid=30728 uid=0 auid=1055 ses=257773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649741.151:4244162): pid=30728 uid=0 auid=1055 ses=257773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649741.474:4244163): pid=30728 uid=0 auid=1055 ses=257773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649741.477:4244164): pid=30728 uid=0 auid=1055 ses=257773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649752.110:4244165): pid=30778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649752.110:4244166): pid=30778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649752.110:4244167): pid=30778 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30778 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649752.362:4244168): pid=30777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30778 suid=74 rport=41884 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649752.362:4244169): pid=30777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30778 suid=74 rport=41884 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=? res=success'
type=USER_AUTH msg=audit(1674649753.442:4244170): pid=30777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.131.29.54 addr=43.131.29.54 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649754.532:4244171): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649754.532:4244171): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9970d8b010 items=0 ppid=30790 pid=30793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649754.532:4244171): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649754.537:4244172): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649754.537:4244172): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd53dea2010 items=0 ppid=30790 pid=30794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649754.537:4244172): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649754.541:4244173): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649754.541:4244173): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7acb81e010 items=0 ppid=30790 pid=30795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649754.541:4244173): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649754.546:4244174): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649754.546:4244174): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe1b9ac6010 items=0 ppid=30790 pid=30796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649754.546:4244174): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674649754.888:4244175): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649754.888:4244175): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8d80ef0010 items=0 ppid=30790 pid=30804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649754.888:4244175): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232302E3133322E3231392E3538002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649754.896:4244176): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649754.896:4244176): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4cade72010 items=0 ppid=30790 pid=30805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649754.896:4244176): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232302E3133322E3231392E3538002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649754.904:4244177): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674649754.904:4244177): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb0b3ea5010 items=0 ppid=30790 pid=30806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649754.904:4244177): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034332E3133312E32392E3534002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649754.913:4244178): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649754.913:4244178): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0aaf49c010 items=0 ppid=30790 pid=30807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649754.913:4244178): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034332E3133312E32392E3534002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674649755.704:4244179): pid=30777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.131.29.54 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649755.815:4244180): pid=30819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649755.815:4244181): pid=30819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649755.815:4244182): pid=30819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30819 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649756.050:4244183): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30819 suid=74 rport=54984 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649756.051:4244184): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30819 suid=74 rport=54984 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=USER_AUTH msg=audit(1674649757.097:4244185): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.53.178.254 addr=12.53.178.254 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649759.575:4244186): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649759.813:4244187): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30819 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649759.813:4244188): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30819 suid=74 rport=54984 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649759.815:4244189): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649759.815:4244190): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649759.815:4244191): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649759.815:4244192): pid=30818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649762.894:4244193): pid=30838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649762.895:4244194): pid=30838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649762.895:4244195): pid=30838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649762.961:4244196): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30838 suid=74 rport=47964 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649762.962:4244197): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30838 suid=74 rport=47964 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=USER_AUTH msg=audit(1674649763.206:4244198): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=65.0.180.172 addr=65.0.180.172 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649764.841:4244199): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649764.885:4244200): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30838 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649764.885:4244201): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30838 suid=74 rport=47964 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649764.887:4244202): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649764.887:4244203): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649764.887:4244204): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30837 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649764.887:4244205): pid=30837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649766.920:4244206): pid=30869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649766.920:4244207): pid=30869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649766.920:4244208): pid=30869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649767.089:4244209): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30869 suid=74 rport=39490 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649767.089:4244210): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30869 suid=74 rport=39490 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=USER_AUTH msg=audit(1674649767.869:4244211): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=202.170.60.201 addr=202.170.60.201 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649769.720:4244212): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649769.891:4244213): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30869 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649769.891:4244214): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30869 suid=74 rport=39490 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649769.892:4244215): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649769.892:4244216): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649769.893:4244217): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649769.893:4244218): pid=30868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649773.998:4244219): pid=30894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649773.998:4244220): pid=30894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649773.998:4244221): pid=30894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649774.051:4244222): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30894 suid=74 rport=38298 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649774.052:4244223): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30894 suid=74 rport=38298 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=USER_AUTH msg=audit(1674649774.359:4244224): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.82.241.69 addr=103.82.241.69 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649775.839:4244225): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649775.910:4244226): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30894 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649775.910:4244227): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30894 suid=74 rport=38298 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649775.911:4244228): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649775.911:4244229): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649775.911:4244230): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649775.911:4244231): pid=30891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649788.269:4244232): pid=30939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649788.270:4244233): pid=30939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649788.270:4244234): pid=30939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649788.548:4244235): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30939 suid=74 rport=38396 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649788.549:4244236): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30939 suid=74 rport=38396 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=USER_AUTH msg=audit(1674649790.577:4244237): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=157.230.1.224 addr=157.230.1.224 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649792.252:4244238): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649792.534:4244239): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30939 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649792.534:4244240): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30939 suid=74 rport=38396 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649792.535:4244241): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649792.535:4244242): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649792.535:4244243): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30938 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649792.535:4244244): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.230.1.224 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649793.932:4244245): pid=30967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649793.932:4244246): pid=30967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649793.932:4244247): pid=30967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30967 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649794.172:4244248): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30967 suid=74 rport=35324 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649794.172:4244249): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30967 suid=74 rport=35324 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=NETFILTER_CFG msg=audit(1674649794.529:4244250): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649794.529:4244250): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f86cfe00010 items=0 ppid=30973 pid=30978 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649794.529:4244250): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649794.533:4244251): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649794.533:4244251): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f80d273a010 items=0 ppid=30973 pid=30979 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649794.533:4244251): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649794.537:4244252): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649794.537:4244252): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4b6bac7010 items=0 ppid=30973 pid=30980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649794.537:4244252): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649794.541:4244253): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649794.541:4244253): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb400f88010 items=0 ppid=30973 pid=30981 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649794.541:4244253): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674649794.848:4244254): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649794.848:4244254): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6fb63d9010 items=0 ppid=30973 pid=30990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649794.848:4244254): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730034352E3132382E3233342E323031002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649794.855:4244255): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649794.855:4244255): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2ea5f0d010 items=0 ppid=30973 pid=30991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649794.855:4244255): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640034352E3132382E3233342E323031002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649794.861:4244256): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674649794.861:4244256): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbad0195010 items=0 ppid=30973 pid=30992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649794.861:4244256): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003135372E3233302E312E323234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649794.868:4244257): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649794.868:4244257): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb15eb60010 items=0 ppid=30973 pid=30993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649794.868:4244257): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003135372E3233302E312E323234002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674649795.233:4244258): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=167.71.7.226 addr=167.71.7.226 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649797.594:4244259): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649797.837:4244260): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30967 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649797.837:4244261): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30967 suid=74 rport=35324 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649797.839:4244262): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649797.839:4244263): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649797.839:4244264): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649797.839:4244265): pid=30966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.7.226 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649799.505:4244266): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649799.505:4244266): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbd63bc7010 items=0 ppid=31029 pid=31032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649799.505:4244266): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649799.510:4244267): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649799.510:4244267): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe8fde16010 items=0 ppid=31029 pid=31033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649799.510:4244267): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649799.514:4244268): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649799.514:4244268): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff05a95d010 items=0 ppid=31029 pid=31034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649799.514:4244268): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649799.517:4244269): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649799.517:4244269): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fda6bbe7010 items=0 ppid=31029 pid=31035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649799.517:4244269): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674649799.825:4244270): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649799.825:4244270): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8c25ce3010 items=0 ppid=31029 pid=31043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649799.825:4244270): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730036382E3138332E3133322E3732002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649799.830:4244271): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649799.830:4244271): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc63c7f9010 items=0 ppid=31029 pid=31044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649799.830:4244271): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640036382E3138332E3133322E3732002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649799.836:4244272): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674649799.836:4244272): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feba75e1010 items=0 ppid=31029 pid=31045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649799.836:4244272): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003136372E37312E372E323236002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649799.841:4244273): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649799.841:4244273): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd770783010 items=0 ppid=31029 pid=31046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649799.841:4244273): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003136372E37312E372E323236002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674649801.495:4244274): pid=31059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674649801.495:4244277): pid=31058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674649801.495:4244276): pid=31060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674649801.495:4244275): pid=31057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649801.495:4244278): pid=31058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649801.495:4244279): pid=31060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649801.495:4244280): pid=31057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649801.495:4244281): pid=31059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649801.496:4244282): pid=31057 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257774 res=1
type=LOGIN msg=audit(1674649801.496:4244283): pid=31058 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257775 res=1
type=LOGIN msg=audit(1674649801.496:4244284): pid=31060 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257776 res=1
type=LOGIN msg=audit(1674649801.496:4244285): pid=31059 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257777 res=1
type=USER_START msg=audit(1674649801.554:4244287): pid=31059 uid=0 auid=0 ses=257777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649801.554:4244286): pid=31058 uid=0 auid=0 ses=257775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649801.554:4244288): pid=31060 uid=0 auid=1055 ses=257776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674649801.554:4244289): pid=31057 uid=0 auid=0 ses=257774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649801.556:4244290): pid=31060 uid=0 auid=1055 ses=257776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649801.556:4244291): pid=31059 uid=0 auid=0 ses=257777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649801.557:4244292): pid=31057 uid=0 auid=0 ses=257774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649801.557:4244293): pid=31058 uid=0 auid=0 ses=257775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649801.588:4244294): pid=31057 uid=0 auid=0 ses=257774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649801.592:4244295): pid=31057 uid=0 auid=0 ses=257774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649801.954:4244296): pid=31060 uid=0 auid=1055 ses=257776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649801.984:4244297): pid=31060 uid=0 auid=1055 ses=257776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649802.280:4244298): pid=31058 uid=0 auid=0 ses=257775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649802.281:4244299): pid=31058 uid=0 auid=0 ses=257775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649804.979:4244300): pid=31059 uid=0 auid=0 ses=257777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649804.981:4244301): pid=31059 uid=0 auid=0 ses=257777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649813.318:4244302): pid=31128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649813.318:4244303): pid=31128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649813.318:4244304): pid=31128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649813.528:4244305): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31128 suid=74 rport=35716 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649813.528:4244306): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31128 suid=74 rport=35716 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=USER_AUTH msg=audit(1674649814.475:4244307): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=109.206.253.33 addr=109.206.253.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649816.111:4244308): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649816.324:4244309): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31128 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649816.324:4244310): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31128 suid=74 rport=35716 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649816.326:4244311): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649816.326:4244312): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649816.326:4244313): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649816.326:4244314): pid=31127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=ssh res=failed'
type=AVC msg=audit(1674649819.506:4244315): avc: denied { read } for pid=31170 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674649819.506:4244315): avc: denied { open } for pid=31170 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649819.506:4244315): arch=c000003e syscall=2 success=yes exit=18 a0=56316a9caf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=31170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649819.506:4244315): proctitle="dovecot/auth"
type=AVC msg=audit(1674649819.506:4244316): avc: denied { getattr } for pid=31170 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674649819.506:4244316): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc16480390 a2=7ffc16480390 a3=fffffc00 items=0 ppid=5547 pid=31170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649819.506:4244316): proctitle="dovecot/auth"
type=AVC msg=audit(1674649820.028:4244317): avc: denied { name_connect } for pid=31170 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674649820.028:4244317): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc16480180 a2=10 a3=7ffc1648017c items=0 ppid=5547 pid=31170 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649820.028:4244317): proctitle="dovecot/auth"
type=AVC msg=audit(1674649820.057:4244318): avc: denied { write } for pid=31198 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649820.057:4244318): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffffee97a70 a2=6e a3=63d120dc items=0 ppid=5547 pid=31198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649820.057:4244318): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674649833.309:4244319): avc: denied { write } for pid=31198 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649833.309:4244319): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffffee97a70 a2=6e a3=63d120e9 items=0 ppid=5547 pid=31198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649833.309:4244319): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674649840.447:4244320): pid=31354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649840.447:4244321): pid=31354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649840.447:4244322): pid=31354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31354 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649840.613:4244323): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31354 suid=74 rport=33852 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649840.613:4244324): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31354 suid=74 rport=33852 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=USER_AUTH msg=audit(1674649841.373:4244325): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=202.170.60.201 addr=202.170.60.201 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649843.384:4244326): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649843.550:4244327): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31354 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649843.550:4244328): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31354 suid=74 rport=33852 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649843.552:4244329): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649843.552:4244330): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649843.553:4244331): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31353 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649843.553:4244332): pid=31353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=202.170.60.201 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649844.579:4244333): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649844.579:4244333): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efcc8955010 items=0 ppid=31373 pid=31376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649844.579:4244333): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649844.585:4244334): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649844.585:4244334): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0f5ba53010 items=0 ppid=31373 pid=31377 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649844.585:4244334): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649844.590:4244335): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649844.590:4244335): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff7f583a010 items=0 ppid=31373 pid=31378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649844.590:4244335): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649844.596:4244336): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649844.596:4244336): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3d09226010 items=0 ppid=31373 pid=31379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649844.596:4244336): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674649844.902:4244337): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649844.902:4244337): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f00c2ac1010 items=0 ppid=31373 pid=31388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649844.902:4244337): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003231312E3231392E3130362E3937002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649844.909:4244338): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649844.909:4244338): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd29a2c3010 items=0 ppid=31373 pid=31389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649844.909:4244338): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003231312E3231392E3130362E3937002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649844.917:4244339): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674649844.917:4244339): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb840f01010 items=0 ppid=31373 pid=31390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649844.917:4244339): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003230322E3137302E36302E323031002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649844.925:4244340): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649844.925:4244340): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5d03557010 items=0 ppid=31373 pid=31391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649844.925:4244340): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003230322E3137302E36302E323031002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674649857.887:4244341): pid=31438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649857.887:4244342): pid=31438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649857.887:4244343): pid=31438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31438 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649857.935:4244344): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31438 suid=74 rport=36472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649857.935:4244345): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31438 suid=74 rport=36472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649858.042:4244346): pid=31440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649858.042:4244347): pid=31440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649858.042:4244348): pid=31440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674649858.234:4244349): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.82.241.69 addr=103.82.241.69 terminal=ssh res=failed'
type=CRYPTO_SESSION msg=audit(1674649858.278:4244350): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31440 suid=74 rport=49504 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649858.278:4244351): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31440 suid=74 rport=49504 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=USER_AUTH msg=audit(1674649859.333:4244352): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.53.178.254 addr=12.53.178.254 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649859.603:4244353): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649859.603:4244353): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7f4ca76010 items=0 ppid=31449 pid=31452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649859.603:4244353): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649859.612:4244354): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649859.612:4244354): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe254182010 items=0 ppid=31449 pid=31453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649859.612:4244354): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649859.618:4244355): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649859.618:4244355): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc4278ce010 items=0 ppid=31449 pid=31454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649859.618:4244355): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649859.624:4244356): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649859.624:4244356): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe294852010 items=0 ppid=31449 pid=31455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649859.624:4244356): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=USER_AUTH msg=audit(1674649859.910:4244357): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649859.966:4244358): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31438 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649859.966:4244359): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31438 suid=74 rport=36472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649859.967:4244360): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649859.967:4244361): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649859.967:4244362): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649859.967:4244363): pid=31437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.82.241.69 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649860.040:4244364): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649860.040:4244364): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7a2d4cc010 items=0 ppid=31449 pid=31466 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649860.040:4244364): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138352E3234362E3133302E3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649860.048:4244365): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649860.048:4244365): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3d4b5df010 items=0 ppid=31449 pid=31467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649860.048:4244365): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138352E3234362E3133302E3230002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649860.057:4244366): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674649860.057:4244366): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa425421010 items=0 ppid=31449 pid=31468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649860.057:4244366): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130332E38322E3234312E3639002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649860.065:4244367): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649860.065:4244367): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f93d75d2010 items=0 ppid=31449 pid=31469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649860.065:4244367): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130332E38322E3234312E3639002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674649861.481:4244368): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649861.719:4244369): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31440 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649861.719:4244370): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31440 suid=74 rport=49504 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649861.720:4244371): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31439 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649861.721:4244372): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31439 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649861.721:4244373): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31439 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649861.721:4244374): pid=31439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674649862.006:4244375): pid=31481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649862.006:4244376): pid=31481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649862.007:4244377): pid=31481 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257778 res=1
type=USER_START msg=audit(1674649862.031:4244378): pid=31481 uid=0 auid=1055 ses=257778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649862.033:4244379): pid=31481 uid=0 auid=1055 ses=257778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649862.398:4244380): pid=31481 uid=0 auid=1055 ses=257778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649862.401:4244381): pid=31481 uid=0 auid=1055 ses=257778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674649880.002:4244382): pid=31546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649880.002:4244383): pid=31546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649880.002:4244384): pid=31546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31546 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649880.233:4244385): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31546 suid=74 rport=55134 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649880.233:4244386): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31546 suid=74 rport=55134 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=USER_AUTH msg=audit(1674649881.237:4244387): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=109.206.253.33 addr=109.206.253.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649882.737:4244388): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674649882.968:4244389): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31546 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649882.968:4244390): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31546 suid=74 rport=55134 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649882.969:4244391): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649882.969:4244392): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649882.969:4244393): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649882.969:4244394): pid=31545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=109.206.253.33 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649884.603:4244395): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649884.603:4244395): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1dca823010 items=0 ppid=31564 pid=31568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649884.603:4244395): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649884.609:4244396): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649884.609:4244396): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb09bf20010 items=0 ppid=31564 pid=31569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649884.609:4244396): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649884.613:4244397): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649884.613:4244397): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f410e697010 items=0 ppid=31564 pid=31570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649884.613:4244397): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649884.616:4244398): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674649884.616:4244398): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2be6777010 items=0 ppid=31564 pid=31571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649884.616:4244398): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674649884.922:4244399): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649884.922:4244399): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe9b87e5010 items=0 ppid=31564 pid=31579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649884.922:4244399): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232302E3133342E3132332E323438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649884.928:4244400): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649884.928:4244400): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f521c1ef010 items=0 ppid=31564 pid=31580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649884.928:4244400): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232302E3133342E3132332E323438002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649884.933:4244401): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674649884.933:4244401): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f12ec48e010 items=0 ppid=31564 pid=31581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649884.933:4244401): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130392E3230362E3235332E3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649884.938:4244402): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649884.938:4244402): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f99f326f010 items=0 ppid=31564 pid=31582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649884.938:4244402): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130392E3230362E3235332E3333002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674649898.803:4244403): avc: denied { name_connect } for pid=31170 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674649898.803:4244403): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc16480180 a2=10 a3=7ffc1648017c items=0 ppid=5547 pid=31170 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649898.803:4244403): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674649899.888:4244404): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649899.888:4244404): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ba57920a010 items=0 ppid=31652 pid=31657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649899.888:4244404): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E36372E3132332E323032002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674649905.284:4244405): pid=31677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649905.284:4244406): pid=31677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649905.284:4244407): pid=31677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649905.527:4244408): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=31677 suid=74 rport=60047 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.127.237.104 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649905.528:4244409): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=31677 suid=74 rport=60047 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.127.237.104 terminal=? res=success'
type=USER_AUTH msg=audit(1674649906.786:4244410): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.127.237.104 addr=59.127.237.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649909.053:4244411): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.127.237.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649909.921:4244412): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.127.237.104 addr=59.127.237.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649911.932:4244413): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.127.237.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649912.477:4244414): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.127.237.104 addr=59.127.237.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649914.232:4244415): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.127.237.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649915.064:4244416): pid=31676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.127.237.104 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649919.740:4244417): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674649919.740:4244417): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3077fa4010 items=0 ppid=31724 pid=31727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649919.740:4244417): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649919.744:4244418): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649919.744:4244418): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdb02732010 items=0 ppid=31724 pid=31728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649919.744:4244418): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649919.748:4244419): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674649919.748:4244419): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3b8b261010 items=0 ppid=31724 pid=31729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649919.748:4244419): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649919.752:4244420): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649919.752:4244420): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6404666010 items=0 ppid=31724 pid=31730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649919.752:4244420): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674649920.080:4244421): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674649920.080:4244421): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5e0a497010 items=0 ppid=31724 pid=31738 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649920.080:4244421): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730034332E3134322E37362E3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649920.087:4244422): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649920.087:4244422): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd195118010 items=0 ppid=31724 pid=31739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649920.087:4244422): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640034332E3134322E37362E3335002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649920.095:4244423): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649920.095:4244423): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcd84ecf010 items=0 ppid=31724 pid=31740 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649920.095:4244423): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035392E3132372E3233372E313034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649920.101:4244424): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649920.101:4244424): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7d6f6d5010 items=0 ppid=31724 pid=31741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649920.101:4244424): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035392E3132372E3233372E313034002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674649921.426:4244425): pid=31753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649921.427:4244426): pid=31753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649921.428:4244427): pid=31753 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257779 res=1
type=USER_START msg=audit(1674649921.472:4244428): pid=31753 uid=0 auid=1055 ses=257779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649921.474:4244429): pid=31753 uid=0 auid=1055 ses=257779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649921.861:4244430): pid=31753 uid=0 auid=1055 ses=257779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649921.863:4244431): pid=31753 uid=0 auid=1055 ses=257779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674649922.389:4244432): avc: denied { write } for pid=31707 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674649922.389:4244432): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffff0d10bd0 a2=6e a3=63d12142 items=0 ppid=5547 pid=31707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649922.389:4244432): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674649936.320:4244433): pid=31805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649936.320:4244434): pid=31805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649936.320:4244435): pid=31805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649936.549:4244436): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31805 suid=74 rport=58448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674649936.549:4244437): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31805 suid=74 rport=58448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=USER_AUTH msg=audit(1674649937.569:4244438): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=12.53.178.254 addr=12.53.178.254 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674649939.756:4244439): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649939.870:4244440): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674649939.870:4244440): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f385fad1010 items=0 ppid=31824 pid=31827 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649939.870:4244440): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674649939.875:4244441): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649939.875:4244441): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f85e6ae7010 items=0 ppid=31824 pid=31828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649939.875:4244441): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674649939.880:4244442): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674649939.880:4244442): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa38311c010 items=0 ppid=31824 pid=31829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649939.880:4244442): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674649939.884:4244443): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674649939.884:4244443): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f727c7f3010 items=0 ppid=31824 pid=31830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649939.884:4244443): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=CRYPTO_KEY_USER msg=audit(1674649939.991:4244444): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31805 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649939.991:4244445): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31805 suid=74 rport=58448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649939.992:4244446): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649939.993:4244447): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674649939.993:4244448): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674649939.993:4244449): pid=31804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=12.53.178.254 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674649940.201:4244450): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674649940.201:4244450): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fce4c781010 items=0 ppid=31824 pid=31838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649940.201:4244450): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003231362E31302E3234352E313830002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649940.207:4244451): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649940.207:4244451): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fab07389010 items=0 ppid=31824 pid=31839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649940.207:4244451): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003231362E31302E3234352E313830002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674649940.212:4244452): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674649940.212:4244452): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f66ee709010 items=0 ppid=31824 pid=31840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649940.212:4244452): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730031322E35332E3137382E323534002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674649940.218:4244453): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674649940.218:4244453): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa1e6d8f010 items=0 ppid=31824 pid=31841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649940.218:4244453): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640031322E35332E3137382E323534002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674649944.607:4244454): avc: denied { name_connect } for pid=31170 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674649944.607:4244454): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc16480180 a2=10 a3=7ffc1648017c items=0 ppid=5547 pid=31170 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649944.607:4244454): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674649945.706:4244455): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674649945.706:4244455): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b95b1980010 items=0 ppid=31866 pid=31890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674649945.706:4244455): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E39342E352E3433002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431323A
type=USER_ACCT msg=audit(1674649981.881:4244456): pid=32005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674649981.881:4244457): pid=32005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674649981.881:4244458): pid=32005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257780 res=1
type=USER_START msg=audit(1674649981.897:4244459): pid=32005 uid=0 auid=1055 ses=257780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674649981.899:4244460): pid=32005 uid=0 auid=1055 ses=257780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674649982.132:4244461): pid=32005 uid=0 auid=1055 ses=257780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674649982.134:4244462): pid=32005 uid=0 auid=1055 ses=257780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674650002.670:4244463): pid=32075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650002.670:4244464): pid=32075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650002.670:4244465): pid=32075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32075 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650004.151:4244466): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=32075 suid=74 rport=57438 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650004.152:4244467): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=32075 suid=74 rport=57438 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=USER_AUTH msg=audit(1674650006.358:4244468): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=65.0.180.172 addr=65.0.180.172 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650008.354:4244469): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674650008.392:4244470): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32075 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650008.392:4244471): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32075 suid=74 rport=57438 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650008.393:4244472): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650008.394:4244473): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650008.394:4244474): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674650008.394:4244475): pid=32069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674650041.152:4244476): pid=32199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650041.152:4244477): pid=32199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650041.154:4244478): pid=32199 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257781 res=1
type=USER_START msg=audit(1674650041.171:4244479): pid=32199 uid=0 auid=1055 ses=257781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650041.172:4244480): pid=32199 uid=0 auid=1055 ses=257781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650041.402:4244481): pid=32199 uid=0 auid=1055 ses=257781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650041.403:4244482): pid=32199 uid=0 auid=1055 ses=257781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674650074.139:4244483): avc: denied { read } for pid=32318 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674650074.139:4244483): avc: denied { open } for pid=32318 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650074.139:4244483): arch=c000003e syscall=2 success=yes exit=18 a0=55f2aa6a2f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=32318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650074.139:4244483): proctitle="dovecot/auth"
type=AVC msg=audit(1674650074.139:4244484): avc: denied { getattr } for pid=32318 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650074.139:4244484): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc8d9f5b90 a2=7ffc8d9f5b90 a3=fffffc00 items=0 ppid=5547 pid=32318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650074.139:4244484): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674650094.296:4244485): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674650094.296:4244485): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2acb82dc2010 items=0 ppid=32384 pid=32389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650094.296:4244485): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E32332E3130362E313032002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674650101.421:4244486): pid=32414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650101.421:4244488): pid=32411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650101.421:4244487): pid=32413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650101.421:4244489): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650101.421:4244490): pid=32414 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650101.421:4244491): pid=32413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650101.421:4244492): pid=32412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650101.421:4244493): pid=32411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650101.421:4244494): pid=32414 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257782 res=1
type=LOGIN msg=audit(1674650101.421:4244495): pid=32411 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257783 res=1
type=LOGIN msg=audit(1674650101.421:4244496): pid=32412 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257784 res=1
type=LOGIN msg=audit(1674650101.421:4244497): pid=32413 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257785 res=1
type=USER_START msg=audit(1674650101.501:4244498): pid=32414 uid=0 auid=1055 ses=257782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650101.502:4244499): pid=32412 uid=0 auid=0 ses=257784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650101.504:4244500): pid=32414 uid=0 auid=1055 ses=257782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650101.504:4244501): pid=32412 uid=0 auid=0 ses=257784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650101.505:4244502): pid=32411 uid=0 auid=0 ses=257783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650101.507:4244503): pid=32413 uid=0 auid=0 ses=257785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650101.507:4244504): pid=32411 uid=0 auid=0 ses=257783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650101.508:4244505): pid=32413 uid=0 auid=0 ses=257785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650101.645:4244506): pid=32412 uid=0 auid=0 ses=257784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650101.649:4244507): pid=32412 uid=0 auid=0 ses=257784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650101.667:4244508): pid=32413 uid=0 auid=0 ses=257785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650101.673:4244509): pid=32413 uid=0 auid=0 ses=257785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650101.899:4244510): pid=32414 uid=0 auid=1055 ses=257782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650101.931:4244511): pid=32414 uid=0 auid=1055 ses=257782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650104.905:4244512): pid=32411 uid=0 auid=0 ses=257783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650104.906:4244513): pid=32411 uid=0 auid=0 ses=257783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674650135.539:4244514): avc: denied { name_connect } for pid=32318 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674650135.539:4244514): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc8d9f5980 a2=10 a3=7ffc8d9f597c items=0 ppid=5547 pid=32318 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650135.539:4244514): proctitle="dovecot/auth"
type=AVC msg=audit(1674650135.567:4244515): avc: denied { write } for pid=32566 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674650135.567:4244515): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe90436db0 a2=6e a3=63d12217 items=0 ppid=5547 pid=32566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650135.567:4244515): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674650135.898:4244516): avc: denied { read append } for pid=32568 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674650135.898:4244516): avc: denied { open } for pid=32568 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650135.898:4244516): arch=c000003e syscall=2 success=yes exit=8 a0=564a7f747a60 a1=402 a2=7ffd12513c50 a3=7ffd125136e0 items=0 ppid=5547 pid=32568 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650135.898:4244516): proctitle="dovecot/imap"
type=AVC msg=audit(1674650135.899:4244517): avc: denied { getattr } for pid=32568 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650135.899:4244517): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffd12513bb0 a2=7ffd12513bb0 a3=7ffd12513620 items=0 ppid=5547 pid=32568 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650135.899:4244517): proctitle="dovecot/imap"
type=AVC msg=audit(1674650135.899:4244518): avc: denied { write } for pid=32568 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650135.899:4244518): arch=c000003e syscall=2 success=yes exit=10 a0=564a7f74c960 a1=2 a2=7ffd12513950 a3=7ffd125133e0 items=0 ppid=5547 pid=32568 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650135.899:4244518): proctitle="dovecot/imap"
type=AVC msg=audit(1674650135.899:4244519): avc: denied { lock } for pid=32568 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650135.899:4244519): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffd12513850 a3=63d12217 items=0 ppid=5547 pid=32568 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650135.899:4244519): proctitle="dovecot/imap"
type=AVC msg=audit(1674650135.899:4244520): avc: denied { read } for pid=32568 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674650135.899:4244520): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=564a7f775300 a2=90800 a3=0 items=0 ppid=5547 pid=32568 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650135.899:4244520): proctitle="dovecot/imap"
type=AVC msg=audit(1674650135.900:4244521): avc: denied { getattr } for pid=32568 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650135.900:4244521): arch=c000003e syscall=4 success=yes exit=0 a0=564a7f737a60 a1=7ffd12513c00 a2=7ffd12513c00 a3=6f632e6f72676173 items=0 ppid=5547 pid=32568 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650135.900:4244521): proctitle="dovecot/imap"
type=AVC msg=audit(1674650138.509:4244522): avc: denied { read } for pid=32633 comm="imap" name="dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674650138.509:4244522): avc: denied { open } for pid=32633 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650138.509:4244522): arch=c000003e syscall=2 success=yes exit=8 a0=5649e35894b0 a1=0 a2=7b48 a3=2 items=0 ppid=5547 pid=32633 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650138.509:4244522): proctitle="dovecot/imap"
type=AVC msg=audit(1674650138.510:4244523): avc: denied { getattr } for pid=32633 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650138.510:4244523): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc3f724c90 a2=7ffc3f724c90 a3=2 items=0 ppid=5547 pid=32633 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650138.510:4244523): proctitle="dovecot/imap"
type=AVC msg=audit(1674650138.510:4244524): avc: denied { append } for pid=32633 comm="imap" name="dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650138.510:4244524): arch=c000003e syscall=2 success=yes exit=8 a0=5649e35dd0d0 a1=402 a2=7ffc3f724bf0 a3=7ffc3f724660 items=0 ppid=5547 pid=32633 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650138.510:4244524): proctitle="dovecot/imap"
type=AVC msg=audit(1674650138.510:4244525): avc: denied { write } for pid=32633 comm="imap" name="dovecot.index" dev="vda1" ino=33481563 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650138.510:4244525): arch=c000003e syscall=2 success=yes exit=10 a0=5649e35dce10 a1=2 a2=7ffc3f7248f0 a3=7ffc3f7243a0 items=0 ppid=5547 pid=32633 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650138.510:4244525): proctitle="dovecot/imap"
type=AVC msg=audit(1674650138.510:4244526): avc: denied { write } for pid=32633 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674650138.510:4244526): avc: denied { add_name } for pid=32633 comm="imap" name="dovecot-uidlist.lock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674650138.510:4244526): avc: denied { create } for pid=32633 comm="imap" name="dovecot-uidlist.lock" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650138.510:4244526): arch=c000003e syscall=2 success=yes exit=13 a0=5649e35895e0 a1=c2 a2=1b6 a3=63d1221a items=0 ppid=5547 pid=32633 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650138.510:4244526): proctitle="dovecot/imap"
type=AVC msg=audit(1674650138.515:4244527): avc: denied { lock } for pid=32633 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650138.515:4244527): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc3f7248d0 a3=63d1221a items=0 ppid=5547 pid=32633 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650138.515:4244527): proctitle="dovecot/imap"
type=AVC msg=audit(1674650138.515:4244528): avc: denied { read } for pid=32633 comm="imap" name="new" dev="vda1" ino=256006826 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674650138.515:4244528): arch=c000003e syscall=257 success=yes exit=16 a0=ffffffffffffff9c a1=5649e3589520 a2=90800 a3=0 items=0 ppid=5547 pid=32633 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650138.515:4244528): proctitle="dovecot/imap"
type=AVC msg=audit(1674650138.516:4244529): avc: denied { remove_name } for pid=32633 comm="imap" name="dovecot-uidlist.lock" dev="vda1" ino=33481525 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674650138.516:4244529): avc: denied { unlink } for pid=32633 comm="imap" name="dovecot-uidlist.lock" dev="vda1" ino=33481525 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650138.516:4244529): arch=c000003e syscall=87 success=yes exit=0 a0=5649e360ec60 a1=7f6aa3c21071 a2=2f9 a3=7ffc3f724860 items=0 ppid=5547 pid=32633 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650138.516:4244529): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674650161.929:4244530): pid=32742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650161.930:4244531): pid=32742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650161.931:4244532): pid=32742 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257786 res=1
type=USER_START msg=audit(1674650161.949:4244533): pid=32742 uid=0 auid=1055 ses=257786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650161.952:4244534): pid=32742 uid=0 auid=1055 ses=257786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650162.242:4244535): pid=32742 uid=0 auid=1055 ses=257786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650162.245:4244536): pid=32742 uid=0 auid=1055 ses=257786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650221.260:4244537): pid=475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650221.260:4244538): pid=475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650221.260:4244539): pid=475 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257787 res=1
type=USER_START msg=audit(1674650221.277:4244540): pid=475 uid=0 auid=1055 ses=257787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650221.278:4244541): pid=475 uid=0 auid=1055 ses=257787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650221.547:4244542): pid=475 uid=0 auid=1055 ses=257787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650221.550:4244543): pid=475 uid=0 auid=1055 ses=257787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674650226.568:4244544): avc: denied { name_connect } for pid=32318 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674650226.568:4244544): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc8d9f5980 a2=10 a3=7ffc8d9f597c items=0 ppid=5547 pid=32318 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650226.568:4244544): proctitle="dovecot/auth"
type=AVC msg=audit(1674650226.613:4244545): avc: denied { write } for pid=499 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674650226.613:4244545): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe747882c0 a2=6e a3=63d12272 items=0 ppid=5547 pid=499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650226.613:4244545): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674650227.701:4244546): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674650227.701:4244546): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b932f207010 items=0 ppid=509 pid=514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650227.701:4244546): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003134332E3139382E3230302E313939002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=CRYPTO_KEY_USER msg=audit(1674650229.620:4244547): pid=520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650229.620:4244548): pid=520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650229.621:4244549): pid=520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=520 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650229.658:4244550): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=520 suid=74 rport=35292 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650229.658:4244551): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=520 suid=74 rport=35292 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=USER_AUTH msg=audit(1674650231.823:4244552): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=65.0.180.172 addr=65.0.180.172 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650233.373:4244553): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674650233.413:4244554): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=520 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650233.413:4244555): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=520 suid=74 rport=35292 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650233.414:4244556): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650233.414:4244557): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650233.414:4244558): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674650233.414:4244559): pid=515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=65.0.180.172 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674650234.852:4244560): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674650234.852:4244560): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa0f81b3010 items=0 ppid=539 pid=542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650234.852:4244560): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674650234.857:4244561): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674650234.857:4244561): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f50bb2a8010 items=0 ppid=539 pid=543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650234.857:4244561): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674650234.862:4244562): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674650234.862:4244562): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb05091a010 items=0 ppid=539 pid=544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650234.862:4244562): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674650234.866:4244563): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674650234.866:4244563): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3362ee8010 items=0 ppid=539 pid=545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650234.866:4244563): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674650235.166:4244564): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674650235.166:4244564): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3352e09010 items=0 ppid=539 pid=553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650235.166:4244564): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003137312E3132302E33392E3531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674650235.174:4244565): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674650235.174:4244565): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbfc6f9a010 items=0 ppid=539 pid=554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650235.174:4244565): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003137312E3132302E33392E3531002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674650235.181:4244566): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674650235.181:4244566): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1d61b90010 items=0 ppid=539 pid=555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650235.181:4244566): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730036352E302E3138302E313732002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674650235.188:4244567): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674650235.188:4244567): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdeea8a1010 items=0 ppid=539 pid=556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650235.188:4244567): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640036352E302E3138302E313732002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674650281.570:4244568): pid=744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650281.571:4244569): pid=744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650281.572:4244570): pid=744 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257788 res=1
type=USER_START msg=audit(1674650281.595:4244571): pid=744 uid=0 auid=1055 ses=257788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650281.597:4244572): pid=744 uid=0 auid=1055 ses=257788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650281.938:4244573): pid=744 uid=0 auid=1055 ses=257788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650281.941:4244574): pid=744 uid=0 auid=1055 ses=257788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650341.958:4244575): pid=946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650341.958:4244576): pid=947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650341.958:4244577): pid=946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650341.958:4244578): pid=947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650341.959:4244580): pid=947 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257790 res=1
type=LOGIN msg=audit(1674650341.959:4244579): pid=946 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257789 res=1
type=USER_START msg=audit(1674650341.996:4244581): pid=947 uid=0 auid=1055 ses=257790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650341.997:4244582): pid=946 uid=0 auid=0 ses=257789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650341.998:4244583): pid=947 uid=0 auid=1055 ses=257790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650341.998:4244584): pid=946 uid=0 auid=0 ses=257789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650342.295:4244585): pid=947 uid=0 auid=1055 ses=257790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650342.297:4244586): pid=947 uid=0 auid=1055 ses=257790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650346.505:4244587): pid=946 uid=0 auid=0 ses=257789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650346.508:4244588): pid=946 uid=0 auid=0 ses=257789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674650355.143:4244589): pid=1003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650355.143:4244590): pid=1003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650355.143:4244591): pid=1003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1003 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650355.729:4244592): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=1003 suid=74 rport=57492 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650355.729:4244593): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=1003 suid=74 rport=57492 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=USER_AUTH msg=audit(1674650357.866:4244594): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650360.048:4244595): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=AVC msg=audit(1674650360.385:4244596): avc: denied { read } for pid=1021 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674650360.385:4244596): avc: denied { open } for pid=1021 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650360.385:4244596): arch=c000003e syscall=2 success=yes exit=18 a0=555db9e1bf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=1021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650360.385:4244596): proctitle="dovecot/auth"
type=AVC msg=audit(1674650360.385:4244597): avc: denied { getattr } for pid=1021 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650360.385:4244597): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffda939c300 a2=7ffda939c300 a3=fffffc00 items=0 ppid=5547 pid=1021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650360.385:4244597): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674650360.846:4244598): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1003 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650360.846:4244599): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1003 suid=74 rport=57492 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650360.848:4244600): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650360.848:4244601): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650360.848:4244602): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674650360.848:4244603): pid=1002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=AVC msg=audit(1674650362.518:4244604): avc: denied { name_connect } for pid=1021 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674650362.518:4244604): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffda939c0f0 a2=10 a3=7ffda939c0ec items=0 ppid=5547 pid=1021 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650362.518:4244604): proctitle="dovecot/auth"
type=AVC msg=audit(1674650362.552:4244605): avc: denied { write } for pid=1026 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674650362.552:4244605): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe7094f6b0 a2=6e a3=63d122fa items=0 ppid=5547 pid=1026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650362.552:4244605): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674650401.530:4244606): pid=1168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650401.530:4244607): pid=1168 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650401.531:4244608): pid=1168 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257791 res=1
type=USER_ACCT msg=audit(1674650401.548:4244609): pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650401.548:4244610): pid=1170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650401.549:4244611): pid=1170 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257792 res=1
type=USER_ACCT msg=audit(1674650401.566:4244612): pid=1169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650401.567:4244613): pid=1169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650401.567:4244614): pid=1169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257793 res=1
type=USER_START msg=audit(1674650401.618:4244615): pid=1170 uid=0 auid=1055 ses=257792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650401.618:4244616): pid=1168 uid=0 auid=0 ses=257791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650401.618:4244617): pid=1169 uid=0 auid=0 ses=257793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650401.620:4244618): pid=1169 uid=0 auid=0 ses=257793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650401.620:4244619): pid=1168 uid=0 auid=0 ses=257791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650401.622:4244620): pid=1170 uid=0 auid=1055 ses=257792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650401.648:4244621): pid=1168 uid=0 auid=0 ses=257791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650401.651:4244622): pid=1168 uid=0 auid=0 ses=257791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650401.962:4244623): pid=1170 uid=0 auid=1055 ses=257792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650401.965:4244624): pid=1170 uid=0 auid=1055 ses=257792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650405.024:4244625): pid=1169 uid=0 auid=0 ses=257793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650405.025:4244626): pid=1169 uid=0 auid=0 ses=257793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674650407.366:4244627): avc: denied { name_connect } for pid=1021 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674650407.366:4244627): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffda939c0f0 a2=10 a3=7ffda939c0ec items=0 ppid=5547 pid=1021 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650407.366:4244627): proctitle="dovecot/auth"
type=AVC msg=audit(1674650407.383:4244628): avc: denied { write } for pid=1026 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674650407.383:4244628): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe7094f6b0 a2=6e a3=63d12327 items=0 ppid=5547 pid=1026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650407.383:4244628): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674650461.050:4244629): pid=1502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650461.050:4244630): pid=1502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650461.052:4244631): pid=1502 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257794 res=1
type=USER_START msg=audit(1674650461.071:4244632): pid=1502 uid=0 auid=1055 ses=257794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650461.073:4244633): pid=1502 uid=0 auid=1055 ses=257794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650461.369:4244634): pid=1502 uid=0 auid=1055 ses=257794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650461.371:4244635): pid=1502 uid=0 auid=1055 ses=257794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674650495.941:4244636): avc: denied { write } for pid=1026 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674650495.941:4244636): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe7094f6b0 a2=6e a3=63d1237f items=0 ppid=5547 pid=1026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650495.941:4244636): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674650510.526:4244637): avc: denied { name_connect } for pid=1021 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674650510.526:4244637): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffda939c0f0 a2=10 a3=7ffda939c0ec items=0 ppid=5547 pid=1021 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650510.526:4244637): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674650521.388:4244638): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650521.388:4244639): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650521.388:4244640): pid=1712 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257795 res=1
type=USER_START msg=audit(1674650521.404:4244641): pid=1712 uid=0 auid=1055 ses=257795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650521.407:4244642): pid=1712 uid=0 auid=1055 ses=257795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650521.751:4244643): pid=1712 uid=0 auid=1055 ses=257795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650521.752:4244644): pid=1712 uid=0 auid=1055 ses=257795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650581.766:4244645): pid=1946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650581.766:4244646): pid=1946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650581.767:4244647): pid=1946 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257796 res=1
type=USER_ACCT msg=audit(1674650581.767:4244648): pid=1945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650581.767:4244649): pid=1945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650581.767:4244650): pid=1945 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257797 res=1
type=USER_START msg=audit(1674650581.813:4244652): pid=1945 uid=0 auid=0 ses=257797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650581.813:4244651): pid=1946 uid=0 auid=1055 ses=257796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650581.814:4244653): pid=1946 uid=0 auid=1055 ses=257796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650581.816:4244654): pid=1945 uid=0 auid=0 ses=257797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650581.874:4244655): pid=1945 uid=0 auid=0 ses=257797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650581.876:4244656): pid=1945 uid=0 auid=0 ses=257797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650582.183:4244657): pid=1946 uid=0 auid=1055 ses=257796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650582.184:4244658): pid=1946 uid=0 auid=1055 ses=257796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674650593.026:4244659): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674650593.026:4244659): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ba1fd743010 items=0 ppid=2000 pid=2008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650593.026:4244659): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034392E39312E3234332E3131002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543132
type=NETFILTER_CFG msg=audit(1674650601.406:4244660): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674650601.406:4244660): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b851a835010 items=0 ppid=2031 pid=2036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650601.406:4244660): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132302E3133332E37302E35002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543132
type=NETFILTER_CFG msg=audit(1674650628.606:4244661): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674650628.606:4244661): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b063b939010 items=0 ppid=2147 pid=2152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650628.606:4244661): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003135372E3132322E3234302E323534002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674650641.199:4244662): pid=2188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650641.199:4244663): pid=2188 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650641.199:4244664): pid=2188 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257798 res=1
type=USER_START msg=audit(1674650641.213:4244665): pid=2188 uid=0 auid=1055 ses=257798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650641.214:4244666): pid=2188 uid=0 auid=1055 ses=257798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650641.465:4244667): pid=2188 uid=0 auid=1055 ses=257798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650641.467:4244668): pid=2188 uid=0 auid=1055 ses=257798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674650693.920:4244669): avc: denied { read } for pid=2361 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674650693.920:4244669): avc: denied { open } for pid=2361 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650693.920:4244669): arch=c000003e syscall=2 success=yes exit=18 a0=559488b19f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650693.920:4244669): proctitle="dovecot/auth"
type=AVC msg=audit(1674650693.920:4244670): avc: denied { getattr } for pid=2361 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650693.920:4244670): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd40e8e390 a2=7ffd40e8e390 a3=fffffc00 items=0 ppid=5547 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650693.920:4244670): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674650701.480:4244671): pid=2390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650701.480:4244672): pid=2392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650701.480:4244673): pid=2391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650701.480:4244674): pid=2390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650701.480:4244675): pid=2392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650701.480:4244676): pid=2391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650701.482:4244677): pid=2390 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257799 res=1
type=LOGIN msg=audit(1674650701.482:4244679): pid=2392 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257801 res=1
type=LOGIN msg=audit(1674650701.482:4244678): pid=2391 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257800 res=1
type=USER_START msg=audit(1674650701.527:4244680): pid=2391 uid=0 auid=0 ses=257800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650701.528:4244681): pid=2390 uid=0 auid=0 ses=257799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674650701.528:4244682): pid=2392 uid=0 auid=1055 ses=257801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650701.528:4244683): pid=2392 uid=0 auid=1055 ses=257801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650701.529:4244684): pid=2390 uid=0 auid=0 ses=257799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650701.529:4244685): pid=2391 uid=0 auid=0 ses=257800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650701.677:4244686): pid=2391 uid=0 auid=0 ses=257800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650701.680:4244687): pid=2391 uid=0 auid=0 ses=257800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650701.804:4244688): pid=2392 uid=0 auid=1055 ses=257801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650701.808:4244689): pid=2392 uid=0 auid=1055 ses=257801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650704.889:4244690): pid=2390 uid=0 auid=0 ses=257799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650704.891:4244691): pid=2390 uid=0 auid=0 ses=257799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674650735.116:4244692): pid=2527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650735.116:4244693): pid=2527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650735.116:4244694): pid=2527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2527 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650735.292:4244695): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=2527 suid=74 rport=54844 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650735.292:4244696): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=2527 suid=74 rport=54844 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674650736.281:4244697): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650738.162:4244698): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650741.343:4244699): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650743.575:4244700): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650746.754:4244701): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650749.005:4244702): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674650752.183:4244703): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2527 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650752.183:4244704): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2527 suid=74 rport=54844 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650752.184:4244705): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650752.184:4244706): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650752.185:4244707): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674650752.185:4244708): pid=2526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674650761.914:4244709): pid=2615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650761.914:4244710): pid=2615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650761.915:4244711): pid=2615 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257802 res=1
type=USER_START msg=audit(1674650761.939:4244712): pid=2615 uid=0 auid=1055 ses=257802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650761.941:4244713): pid=2615 uid=0 auid=1055 ses=257802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650762.283:4244714): pid=2615 uid=0 auid=1055 ses=257802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650762.285:4244715): pid=2615 uid=0 auid=1055 ses=257802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674650777.957:4244716): avc: denied { read } for pid=2699 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674650777.957:4244716): avc: denied { open } for pid=2699 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650777.957:4244716): arch=c000003e syscall=2 success=yes exit=18 a0=5617e823ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650777.957:4244716): proctitle="dovecot/auth"
type=AVC msg=audit(1674650777.957:4244717): avc: denied { getattr } for pid=2699 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674650777.957:4244717): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe93b888b0 a2=7ffe93b888b0 a3=fffffc00 items=0 ppid=5547 pid=2699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650777.957:4244717): proctitle="dovecot/auth"
type=AVC msg=audit(1674650778.618:4244718): avc: denied { name_connect } for pid=2699 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674650778.618:4244718): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe93b886a0 a2=10 a3=7ffe93b8869c items=0 ppid=5547 pid=2699 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650778.618:4244718): proctitle="dovecot/auth"
type=AVC msg=audit(1674650778.648:4244719): avc: denied { write } for pid=2729 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674650778.648:4244719): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd0d2d0f80 a2=6e a3=63d1249a items=0 ppid=5547 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650778.648:4244719): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674650782.270:4244720): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674650782.270:4244720): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b0adf858010 items=0 ppid=2791 pid=2796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650782.270:4244720): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138302E3136372E39312E313738002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674650788.902:4244721): avc: denied { write } for pid=2729 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674650788.902:4244721): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd0d2d0f80 a2=6e a3=63d124a4 items=0 ppid=5547 pid=2729 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674650788.902:4244721): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674650821.308:4244722): pid=2917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650821.308:4244723): pid=2917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650821.309:4244724): pid=2917 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257803 res=1
type=USER_START msg=audit(1674650821.329:4244725): pid=2917 uid=0 auid=1055 ses=257803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650821.330:4244726): pid=2917 uid=0 auid=1055 ses=257803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650821.709:4244727): pid=2917 uid=0 auid=1055 ses=257803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650821.711:4244728): pid=2917 uid=0 auid=1055 ses=257803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674650850.221:4244729): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650850.222:4244730): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650850.222:4244731): pid=3016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3016 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650850.594:4244732): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=3016 suid=74 rport=46656 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674650850.594:4244733): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=3016 suid=74 rport=46656 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674650851.934:4244734): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674650853.599:4244735): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674650853.959:4244736): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3016 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650853.959:4244737): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3016 suid=74 rport=46656 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650853.960:4244738): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650853.960:4244739): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674650853.960:4244740): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3014 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674650853.960:4244741): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674650881.727:4244742): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650881.727:4244743): pid=3103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650881.729:4244744): pid=3103 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257804 res=1
type=USER_START msg=audit(1674650881.748:4244745): pid=3103 uid=0 auid=1055 ses=257804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650881.752:4244746): pid=3103 uid=0 auid=1055 ses=257804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650882.118:4244747): pid=3103 uid=0 auid=1055 ses=257804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650882.120:4244748): pid=3103 uid=0 auid=1055 ses=257804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674650941.136:4244749): pid=3282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674650941.136:4244750): pid=3282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674650941.136:4244751): pid=3282 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257805 res=1
type=USER_START msg=audit(1674650941.152:4244752): pid=3282 uid=0 auid=1055 ses=257805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674650941.153:4244753): pid=3282 uid=0 auid=1055 ses=257805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674650941.507:4244754): pid=3282 uid=0 auid=1055 ses=257805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674650941.513:4244755): pid=3282 uid=0 auid=1055 ses=257805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651001.529:4244756): pid=3470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651001.529:4244757): pid=3470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651001.529:4244758): pid=3470 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257806 res=1
type=USER_ACCT msg=audit(1674651001.533:4244759): pid=3469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651001.534:4244760): pid=3472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651001.534:4244761): pid=3472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651001.534:4244762): pid=3469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651001.534:4244763): pid=3469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257808 res=1
type=LOGIN msg=audit(1674651001.534:4244764): pid=3472 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257807 res=1
type=USER_ACCT msg=audit(1674651001.546:4244765): pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651001.546:4244766): pid=3471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651001.547:4244767): pid=3471 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257809 res=1
type=USER_START msg=audit(1674651001.586:4244768): pid=3470 uid=0 auid=0 ses=257806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651001.587:4244769): pid=3470 uid=0 auid=0 ses=257806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651001.588:4244770): pid=3472 uid=0 auid=1055 ses=257807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651001.588:4244771): pid=3469 uid=0 auid=0 ses=257808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651001.589:4244772): pid=3471 uid=0 auid=0 ses=257809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651001.591:4244773): pid=3471 uid=0 auid=0 ses=257809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651001.591:4244774): pid=3469 uid=0 auid=0 ses=257808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651001.591:4244775): pid=3472 uid=0 auid=1055 ses=257807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651001.649:4244776): pid=3469 uid=0 auid=0 ses=257808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651001.652:4244777): pid=3469 uid=0 auid=0 ses=257808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651001.698:4244778): pid=3471 uid=0 auid=0 ses=257809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651001.701:4244779): pid=3471 uid=0 auid=0 ses=257809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651001.969:4244780): pid=3472 uid=0 auid=1055 ses=257807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651001.971:4244781): pid=3472 uid=0 auid=1055 ses=257807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651004.972:4244782): pid=3470 uid=0 auid=0 ses=257806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651004.974:4244783): pid=3470 uid=0 auid=0 ses=257806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674651043.268:4244784): avc: denied { read } for pid=3634 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674651043.268:4244784): avc: denied { open } for pid=3634 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651043.268:4244784): arch=c000003e syscall=2 success=yes exit=18 a0=55adba8c0f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651043.268:4244784): proctitle="dovecot/auth"
type=AVC msg=audit(1674651043.268:4244785): avc: denied { getattr } for pid=3634 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651043.268:4244785): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc7a2d3990 a2=7ffc7a2d3990 a3=fffffc00 items=0 ppid=5547 pid=3634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651043.268:4244785): proctitle="dovecot/auth"
type=AVC msg=audit(1674651043.622:4244786): avc: denied { name_connect } for pid=3634 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674651043.622:4244786): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc7a2d3780 a2=10 a3=7ffc7a2d377c items=0 ppid=5547 pid=3634 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651043.622:4244786): proctitle="dovecot/auth"
type=AVC msg=audit(1674651043.655:4244787): avc: denied { write } for pid=3636 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674651043.655:4244787): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff196a0d80 a2=6e a3=63d125a3 items=0 ppid=5547 pid=3636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651043.655:4244787): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674651044.061:4244788): avc: denied { read append } for pid=3644 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674651044.061:4244788): avc: denied { open } for pid=3644 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651044.061:4244788): arch=c000003e syscall=2 success=yes exit=8 a0=560fa1f23a60 a1=402 a2=7fff44532890 a3=7fff44532320 items=0 ppid=5547 pid=3644 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651044.061:4244788): proctitle="dovecot/imap"
type=AVC msg=audit(1674651044.061:4244789): avc: denied { getattr } for pid=3644 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651044.061:4244789): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff445327f0 a2=7fff445327f0 a3=7fff44532260 items=0 ppid=5547 pid=3644 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651044.061:4244789): proctitle="dovecot/imap"
type=AVC msg=audit(1674651044.061:4244790): avc: denied { write } for pid=3644 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651044.061:4244790): arch=c000003e syscall=2 success=yes exit=10 a0=560fa1f28960 a1=2 a2=7fff44532590 a3=7fff44532020 items=0 ppid=5547 pid=3644 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651044.061:4244790): proctitle="dovecot/imap"
type=AVC msg=audit(1674651044.062:4244791): avc: denied { lock } for pid=3644 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651044.062:4244791): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff44532490 a3=63d125a4 items=0 ppid=5547 pid=3644 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651044.062:4244791): proctitle="dovecot/imap"
type=AVC msg=audit(1674651044.062:4244792): avc: denied { read } for pid=3644 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674651044.062:4244792): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=560fa1f512f8 a2=90800 a3=0 items=0 ppid=5547 pid=3644 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651044.062:4244792): proctitle="dovecot/imap"
type=AVC msg=audit(1674651044.062:4244793): avc: denied { getattr } for pid=3644 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651044.062:4244793): arch=c000003e syscall=4 success=yes exit=0 a0=560fa1f13a60 a1=7fff44532840 a2=7fff44532840 a3=6f632e6f72676173 items=0 ppid=5547 pid=3644 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651044.062:4244793): proctitle="dovecot/imap"
type=AVC msg=audit(1674651045.541:4244794): avc: denied { write } for pid=3651 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674651045.541:4244794): arch=c000003e syscall=21 success=yes exit=0 a0=562fc0f074c0 a1=2 a2=7b48 a3=7ffcdb547820 items=0 ppid=5547 pid=3651 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651045.541:4244794): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674651062.016:4244795): pid=3691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651062.026:4244796): pid=3691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651062.028:4244797): pid=3691 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257810 res=1
type=USER_START msg=audit(1674651062.065:4244798): pid=3691 uid=0 auid=1055 ses=257810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651062.067:4244799): pid=3691 uid=0 auid=1055 ses=257810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651062.444:4244800): pid=3691 uid=0 auid=1055 ses=257810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651062.447:4244801): pid=3691 uid=0 auid=1055 ses=257810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674651092.176:4244802): avc: denied { name_connect } for pid=3634 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674651092.176:4244802): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffc7a2d3780 a2=10 a3=7ffc7a2d377c items=0 ppid=5547 pid=3634 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651092.176:4244802): proctitle="dovecot/auth"
type=AVC msg=audit(1674651092.187:4244803): avc: denied { write } for pid=3636 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674651092.187:4244803): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff196a0d80 a2=6e a3=63d125d4 items=0 ppid=5547 pid=3636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651092.187:4244803): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674651121.462:4244804): pid=3977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651121.462:4244805): pid=3977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651121.463:4244806): pid=3977 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257811 res=1
type=USER_START msg=audit(1674651121.478:4244807): pid=3977 uid=0 auid=1055 ses=257811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651121.480:4244808): pid=3977 uid=0 auid=1055 ses=257811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651121.736:4244809): pid=3977 uid=0 auid=1055 ses=257811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651121.738:4244810): pid=3977 uid=0 auid=1055 ses=257811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674651125.627:4244811): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651125.627:4244812): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651125.627:4244813): pid=3998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3998 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674651181.758:4244814): pid=4169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651181.758:4244815): pid=4169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651181.760:4244816): pid=4169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257812 res=1
type=USER_START msg=audit(1674651181.775:4244817): pid=4169 uid=0 auid=1055 ses=257812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651181.775:4244818): pid=4169 uid=0 auid=1055 ses=257812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651182.051:4244819): pid=4169 uid=0 auid=1055 ses=257812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651182.054:4244820): pid=4169 uid=0 auid=1055 ses=257812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674651227.499:4244821): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651227.499:4244822): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651227.499:4244823): pid=4319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674651227.502:4244824): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=4319 suid=74 rport=52570 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.148.166.148 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674651227.502:4244825): pid=4311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=4319 suid=74 rport=52570 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.148.166.148 terminal=? res=success'
type=USER_ACCT msg=audit(1674651241.070:4244826): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651241.070:4244827): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651241.070:4244828): pid=4357 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257813 res=1
type=USER_START msg=audit(1674651241.086:4244829): pid=4357 uid=0 auid=1055 ses=257813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651241.087:4244830): pid=4357 uid=0 auid=1055 ses=257813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651241.385:4244831): pid=4357 uid=0 auid=1055 ses=257813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651241.395:4244832): pid=4357 uid=0 auid=1055 ses=257813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651301.408:4244833): pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651301.408:4244834): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651301.408:4244835): pid=4565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651301.408:4244836): pid=4564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651301.408:4244837): pid=4564 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257814 res=1
type=LOGIN msg=audit(1674651301.408:4244838): pid=4565 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257815 res=1
type=USER_START msg=audit(1674651301.444:4244839): pid=4565 uid=0 auid=1055 ses=257815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651301.444:4244840): pid=4564 uid=0 auid=0 ses=257814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651301.448:4244841): pid=4565 uid=0 auid=1055 ses=257815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651301.449:4244842): pid=4564 uid=0 auid=0 ses=257814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651301.796:4244843): pid=4565 uid=0 auid=1055 ses=257815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651301.800:4244844): pid=4565 uid=0 auid=1055 ses=257815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651304.790:4244845): pid=4564 uid=0 auid=0 ses=257814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651304.792:4244846): pid=4564 uid=0 auid=0 ses=257814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651361.811:4244847): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651361.811:4244848): pid=4817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651361.812:4244849): pid=4817 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257816 res=1
type=USER_START msg=audit(1674651361.839:4244850): pid=4817 uid=0 auid=1055 ses=257816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651361.846:4244851): pid=4817 uid=0 auid=1055 ses=257816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651362.179:4244852): pid=4817 uid=0 auid=1055 ses=257816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651362.181:4244853): pid=4817 uid=0 auid=1055 ses=257816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651421.198:4244854): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651421.198:4244855): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651421.199:4244856): pid=5005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257817 res=1
type=USER_START msg=audit(1674651421.217:4244857): pid=5005 uid=0 auid=1055 ses=257817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651421.218:4244858): pid=5005 uid=0 auid=1055 ses=257817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651421.517:4244859): pid=5005 uid=0 auid=1055 ses=257817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651421.518:4244860): pid=5005 uid=0 auid=1055 ses=257817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674651479.633:4244861): avc: denied { read } for pid=5231 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674651479.633:4244861): avc: denied { open } for pid=5231 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651479.633:4244861): arch=c000003e syscall=2 success=yes exit=18 a0=55c781354f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=5231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651479.633:4244861): proctitle="dovecot/auth"
type=AVC msg=audit(1674651479.633:4244862): avc: denied { getattr } for pid=5231 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651479.633:4244862): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe8a1666a0 a2=7ffe8a1666a0 a3=fffffc00 items=0 ppid=5547 pid=5231 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651479.633:4244862): proctitle="dovecot/auth"
type=AVC msg=audit(1674651480.206:4244863): avc: denied { name_connect } for pid=5231 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674651480.206:4244863): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe8a166490 a2=10 a3=7ffe8a16648c items=0 ppid=5547 pid=5231 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651480.206:4244863): proctitle="dovecot/auth"
type=AVC msg=audit(1674651480.237:4244864): avc: denied { write } for pid=5259 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674651480.237:4244864): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc4227e720 a2=6e a3=63d12758 items=0 ppid=5547 pid=5259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651480.237:4244864): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674651481.536:4244865): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651481.536:4244866): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651481.536:4244867): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651481.537:4244868): pid=5277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651481.537:4244869): pid=5276 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257818 res=1
type=LOGIN msg=audit(1674651481.537:4244870): pid=5277 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257819 res=1
type=USER_START msg=audit(1674651481.571:4244871): pid=5276 uid=0 auid=0 ses=257818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651481.571:4244872): pid=5277 uid=0 auid=1055 ses=257819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651481.574:4244873): pid=5277 uid=0 auid=1055 ses=257819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651481.575:4244874): pid=5276 uid=0 auid=0 ses=257818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651481.643:4244875): pid=5276 uid=0 auid=0 ses=257818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651481.645:4244876): pid=5276 uid=0 auid=0 ses=257818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651481.825:4244877): pid=5277 uid=0 auid=1055 ses=257819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651481.826:4244878): pid=5277 uid=0 auid=1055 ses=257819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674651487.098:4244879): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674651487.098:4244879): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b403532f010 items=0 ppid=5354 pid=5359 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651487.098:4244879): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003136322E3234302E3232312E3635002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674651541.844:4244880): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651541.844:4244881): pid=5521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651541.844:4244882): pid=5521 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257820 res=1
type=USER_START msg=audit(1674651541.860:4244883): pid=5521 uid=0 auid=1055 ses=257820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651541.861:4244884): pid=5521 uid=0 auid=1055 ses=257820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651542.124:4244885): pid=5521 uid=0 auid=1055 ses=257820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651542.126:4244886): pid=5521 uid=0 auid=1055 ses=257820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651601.139:4244887): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651601.139:4244888): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651601.140:4244889): pid=5722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651601.140:4244890): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651601.140:4244891): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651601.140:4244892): pid=5722 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257821 res=1
type=LOGIN msg=audit(1674651601.140:4244893): pid=5723 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257822 res=1
type=CRED_ACQ msg=audit(1674651601.140:4244894): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651601.140:4244895): pid=5721 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257823 res=1
type=USER_START msg=audit(1674651601.167:4244896): pid=5723 uid=0 auid=1055 ses=257822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651601.167:4244897): pid=5722 uid=0 auid=0 ses=257821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651601.168:4244898): pid=5721 uid=0 auid=0 ses=257823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651601.169:4244899): pid=5723 uid=0 auid=1055 ses=257822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651601.169:4244900): pid=5721 uid=0 auid=0 ses=257823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651601.169:4244901): pid=5722 uid=0 auid=0 ses=257821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651601.192:4244902): pid=5721 uid=0 auid=0 ses=257823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651601.194:4244903): pid=5721 uid=0 auid=0 ses=257823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651601.426:4244904): pid=5723 uid=0 auid=1055 ses=257822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651601.428:4244905): pid=5723 uid=0 auid=1055 ses=257822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651604.474:4244906): pid=5722 uid=0 auid=0 ses=257821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651604.476:4244907): pid=5722 uid=0 auid=0 ses=257821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674651641.988:4244908): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651641.988:4244909): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651641.989:4244910): pid=5891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674651642.232:4244911): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=5891 suid=74 rport=2879 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674651642.232:4244912): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=5891 suid=74 rport=2879 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=? res=success'
type=USER_AUTH msg=audit(1674651643.312:4244913): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=31.41.244.124 addr=31.41.244.124 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674651645.371:4244914): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674651645.644:4244915): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5891 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651645.644:4244916): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5891 suid=74 rport=2879 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651645.647:4244917): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651645.647:4244918): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651645.647:4244919): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5890 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674651645.647:4244920): pid=5890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674651661.497:4244921): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651661.497:4244922): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651661.497:4244923): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651661.497:4244924): pid=5941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651661.499:4244925): pid=5940 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257824 res=1
type=LOGIN msg=audit(1674651661.499:4244926): pid=5941 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257825 res=1
type=USER_START msg=audit(1674651661.554:4244927): pid=5941 uid=0 auid=1055 ses=257825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651661.554:4244928): pid=5940 uid=0 auid=0 ses=257824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651661.556:4244929): pid=5940 uid=0 auid=0 ses=257824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651661.556:4244930): pid=5941 uid=0 auid=1055 ses=257825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651661.598:4244931): pid=5940 uid=0 auid=0 ses=257824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651661.600:4244932): pid=5940 uid=0 auid=0 ses=257824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651661.970:4244933): pid=5941 uid=0 auid=1055 ses=257825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651661.984:4244934): pid=5941 uid=0 auid=1055 ses=257825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674651704.919:4244935): avc: denied { read } for pid=6103 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674651704.919:4244935): avc: denied { open } for pid=6103 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651704.919:4244935): arch=c000003e syscall=2 success=yes exit=18 a0=556271319f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=6103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651704.919:4244935): proctitle="dovecot/auth"
type=AVC msg=audit(1674651704.919:4244936): avc: denied { getattr } for pid=6103 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651704.919:4244936): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff164a8e00 a2=7fff164a8e00 a3=fffffc00 items=0 ppid=5547 pid=6103 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651704.919:4244936): proctitle="dovecot/auth"
type=AVC msg=audit(1674651705.410:4244937): avc: denied { name_connect } for pid=6103 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674651705.410:4244937): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff164a8bf0 a2=10 a3=7fff164a8bec items=0 ppid=5547 pid=6103 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651705.410:4244937): proctitle="dovecot/auth"
type=AVC msg=audit(1674651705.444:4244938): avc: denied { write } for pid=6105 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674651705.444:4244938): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffece746fc0 a2=6e a3=63d12839 items=0 ppid=5547 pid=6105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651705.444:4244938): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674651722.003:4244939): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651722.004:4244940): pid=6147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651722.004:4244941): pid=6147 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257826 res=1
type=USER_START msg=audit(1674651722.035:4244942): pid=6147 uid=0 auid=1055 ses=257826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651722.046:4244943): pid=6147 uid=0 auid=1055 ses=257826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651722.389:4244944): pid=6147 uid=0 auid=1055 ses=257826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651722.391:4244945): pid=6147 uid=0 auid=1055 ses=257826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651781.403:4244946): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651781.404:4244947): pid=6325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651781.405:4244948): pid=6325 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257827 res=1
type=USER_START msg=audit(1674651781.419:4244949): pid=6325 uid=0 auid=1055 ses=257827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651781.420:4244950): pid=6325 uid=0 auid=1055 ses=257827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651781.682:4244951): pid=6325 uid=0 auid=1055 ses=257827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651781.684:4244952): pid=6325 uid=0 auid=1055 ses=257827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651841.705:4244953): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651841.705:4244954): pid=6612 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651841.705:4244955): pid=6612 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257828 res=1
type=USER_START msg=audit(1674651841.723:4244956): pid=6612 uid=0 auid=1055 ses=257828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651841.725:4244957): pid=6612 uid=0 auid=1055 ses=257828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651841.967:4244958): pid=6612 uid=0 auid=1055 ses=257828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651841.969:4244959): pid=6612 uid=0 auid=1055 ses=257828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674651872.548:4244960): avc: denied { name_connect } for pid=6103 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674651872.548:4244960): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7fff164a8bf0 a2=10 a3=7fff164a8bec items=0 ppid=5547 pid=6103 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651872.548:4244960): proctitle="dovecot/auth"
type=AVC msg=audit(1674651872.560:4244961): avc: denied { write } for pid=6517 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674651872.560:4244961): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc1c1ca710 a2=6e a3=63d128e0 items=0 ppid=5547 pid=6517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651872.560:4244961): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674651901.986:4244962): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651901.986:4244963): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674651901.986:4244964): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651901.986:4244965): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651901.987:4244966): pid=6805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651901.987:4244967): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651901.987:4244968): pid=6804 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257829 res=1
type=LOGIN msg=audit(1674651901.987:4244969): pid=6805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257830 res=1
type=LOGIN msg=audit(1674651901.987:4244970): pid=6806 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257831 res=1
type=USER_START msg=audit(1674651902.034:4244971): pid=6806 uid=0 auid=1055 ses=257831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651902.034:4244972): pid=6805 uid=0 auid=0 ses=257830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674651902.035:4244973): pid=6804 uid=0 auid=0 ses=257829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651902.036:4244974): pid=6806 uid=0 auid=1055 ses=257831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651902.037:4244975): pid=6805 uid=0 auid=0 ses=257830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651902.037:4244976): pid=6804 uid=0 auid=0 ses=257829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651902.143:4244977): pid=6805 uid=0 auid=0 ses=257830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651902.146:4244978): pid=6805 uid=0 auid=0 ses=257830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651902.390:4244979): pid=6806 uid=0 auid=1055 ses=257831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651902.393:4244980): pid=6806 uid=0 auid=1055 ses=257831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651905.423:4244981): pid=6804 uid=0 auid=0 ses=257829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651905.425:4244982): pid=6804 uid=0 auid=0 ses=257829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674651923.237:4244983): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651923.237:4244984): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651923.238:4244985): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6878 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674651923.527:4244986): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=6878 suid=74 rport=61148 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.169.175.102 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674651923.527:4244987): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=6878 suid=74 rport=61148 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.169.175.102 terminal=? res=success'
type=USER_AUTH msg=audit(1674651927.679:4244988): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.169.175.102 addr=194.169.175.102 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674651930.062:4244989): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.169.175.102 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674651930.232:4244990): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6878 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651930.232:4244991): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6878 suid=74 rport=61148 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.169.175.102 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651930.235:4244992): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651930.235:4244993): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674651930.235:4244994): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6877 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674651930.235:4244995): pid=6877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.169.175.102 terminal=ssh res=failed'
type=AVC msg=audit(1674651954.102:4244996): avc: denied { read } for pid=6984 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674651954.102:4244996): avc: denied { open } for pid=6984 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651954.102:4244996): arch=c000003e syscall=2 success=yes exit=18 a0=55fc30691f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=6984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651954.102:4244996): proctitle="dovecot/auth"
type=AVC msg=audit(1674651954.102:4244997): avc: denied { getattr } for pid=6984 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651954.102:4244997): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdd61d2c90 a2=7ffdd61d2c90 a3=fffffc00 items=0 ppid=5547 pid=6984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651954.102:4244997): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674651961.455:4244998): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674651961.455:4244999): pid=7002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674651961.457:4245000): pid=7002 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257832 res=1
type=USER_START msg=audit(1674651961.476:4245001): pid=7002 uid=0 auid=1055 ses=257832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674651961.478:4245002): pid=7002 uid=0 auid=1055 ses=257832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674651961.858:4245003): pid=7002 uid=0 auid=1055 ses=257832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674651961.862:4245004): pid=7002 uid=0 auid=1055 ses=257832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674651965.462:4245005): avc: denied { name_connect } for pid=6984 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674651965.462:4245005): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffdd61d2a80 a2=10 a3=7ffdd61d2a7c items=0 ppid=5547 pid=6984 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651965.462:4245005): proctitle="dovecot/auth"
type=AVC msg=audit(1674651965.495:4245006): avc: denied { write } for pid=7025 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674651965.495:4245006): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd2392e9d0 a2=6e a3=63d1293d items=0 ppid=5547 pid=7025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651965.495:4245006): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674651966.001:4245007): avc: denied { read append } for pid=7027 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674651966.001:4245007): avc: denied { open } for pid=7027 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651966.001:4245007): arch=c000003e syscall=2 success=yes exit=8 a0=55c26781ba60 a1=402 a2=7ffda900e6e0 a3=7ffda900e160 items=0 ppid=5547 pid=7027 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651966.001:4245007): proctitle="dovecot/imap"
type=AVC msg=audit(1674651966.002:4245008): avc: denied { getattr } for pid=7027 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651966.002:4245008): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffda900e640 a2=7ffda900e640 a3=7ffda900e0a0 items=0 ppid=5547 pid=7027 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651966.002:4245008): proctitle="dovecot/imap"
type=AVC msg=audit(1674651966.002:4245009): avc: denied { write } for pid=7027 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651966.002:4245009): arch=c000003e syscall=2 success=yes exit=10 a0=55c267820960 a1=2 a2=7ffda900e3e0 a3=7ffda900dea0 items=0 ppid=5547 pid=7027 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651966.002:4245009): proctitle="dovecot/imap"
type=AVC msg=audit(1674651966.002:4245010): avc: denied { lock } for pid=7027 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651966.002:4245010): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffda900e2e0 a3=63d1293e items=0 ppid=5547 pid=7027 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651966.002:4245010): proctitle="dovecot/imap"
type=AVC msg=audit(1674651966.002:4245011): avc: denied { read } for pid=7027 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674651966.002:4245011): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55c2678492f8 a2=90800 a3=0 items=0 ppid=5547 pid=7027 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651966.002:4245011): proctitle="dovecot/imap"
type=AVC msg=audit(1674651966.003:4245012): avc: denied { getattr } for pid=7027 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674651966.003:4245012): arch=c000003e syscall=4 success=yes exit=0 a0=55c26780ba60 a1=7ffda900e690 a2=7ffda900e690 a3=6f632e6f72676173 items=0 ppid=5547 pid=7027 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651966.003:4245012): proctitle="dovecot/imap"
type=AVC msg=audit(1674651970.223:4245013): avc: denied { write } for pid=7038 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674651970.223:4245013): arch=c000003e syscall=21 success=yes exit=0 a0=5582a961b4c0 a1=2 a2=7b48 a3=7ffcdec10de0 items=0 ppid=5547 pid=7038 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674651970.223:4245013): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674652021.883:4245014): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652021.883:4245015): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652021.885:4245016): pid=7191 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257833 res=1
type=USER_START msg=audit(1674652021.912:4245017): pid=7191 uid=0 auid=1055 ses=257833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652021.913:4245018): pid=7191 uid=0 auid=1055 ses=257833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652022.221:4245019): pid=7191 uid=0 auid=1055 ses=257833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652022.222:4245020): pid=7191 uid=0 auid=1055 ses=257833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674652066.910:4245021): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674652066.910:4245021): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af77ff79010 items=0 ppid=7344 pid=7349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652066.910:4245021): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E382E3232332E3538002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431333A
type=USER_ACCT msg=audit(1674652081.239:4245022): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652081.239:4245023): pid=7387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652081.240:4245024): pid=7387 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257834 res=1
type=USER_START msg=audit(1674652081.259:4245025): pid=7387 uid=0 auid=1055 ses=257834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652081.261:4245026): pid=7387 uid=0 auid=1055 ses=257834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652081.598:4245027): pid=7387 uid=0 auid=1055 ses=257834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652081.600:4245028): pid=7387 uid=0 auid=1055 ses=257834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674652086.587:4245029): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674652086.587:4245029): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5a0e547010 items=0 ppid=7416 pid=7421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652086.587:4245029): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E32332E39352E3134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543133
type=AVC msg=audit(1674652132.875:4245030): avc: denied { name_connect } for pid=6984 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674652132.875:4245030): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffdd61d2a80 a2=10 a3=7ffdd61d2a7c items=0 ppid=5547 pid=6984 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652132.875:4245030): proctitle="dovecot/auth"
type=AVC msg=audit(1674652132.889:4245031): avc: denied { write } for pid=7025 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674652132.889:4245031): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd2392e9d0 a2=6e a3=63d129e4 items=0 ppid=5547 pid=7025 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652132.889:4245031): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674652141.626:4245032): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652141.626:4245033): pid=7688 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652141.626:4245034): pid=7688 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257835 res=1
type=USER_ACCT msg=audit(1674652141.642:4245035): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652141.642:4245036): pid=7689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652141.643:4245037): pid=7689 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257836 res=1
type=USER_START msg=audit(1674652141.685:4245038): pid=7688 uid=0 auid=0 ses=257835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674652141.687:4245039): pid=7689 uid=0 auid=1055 ses=257836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652141.688:4245040): pid=7689 uid=0 auid=1055 ses=257836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652141.689:4245041): pid=7688 uid=0 auid=0 ses=257835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652142.020:4245042): pid=7689 uid=0 auid=1055 ses=257836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652142.023:4245043): pid=7689 uid=0 auid=1055 ses=257836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652143.043:4245044): pid=7688 uid=0 auid=0 ses=257835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652143.046:4245045): pid=7688 uid=0 auid=0 ses=257835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652201.062:4245046): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652201.062:4245047): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652201.062:4245048): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652201.062:4245049): pid=7916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652201.062:4245050): pid=7914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652201.062:4245051): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652201.063:4245052): pid=7916 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257837 res=1
type=LOGIN msg=audit(1674652201.063:4245053): pid=7914 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257838 res=1
type=LOGIN msg=audit(1674652201.063:4245054): pid=7915 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257839 res=1
type=USER_START msg=audit(1674652201.111:4245055): pid=7914 uid=0 auid=0 ses=257838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674652201.112:4245056): pid=7915 uid=0 auid=0 ses=257839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674652201.112:4245057): pid=7916 uid=0 auid=1055 ses=257837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652201.112:4245058): pid=7914 uid=0 auid=0 ses=257838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652201.112:4245059): pid=7915 uid=0 auid=0 ses=257839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652201.113:4245060): pid=7916 uid=0 auid=1055 ses=257837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652201.140:4245061): pid=7914 uid=0 auid=0 ses=257838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652201.143:4245062): pid=7914 uid=0 auid=0 ses=257838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652201.348:4245063): pid=7916 uid=0 auid=1055 ses=257837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652201.352:4245064): pid=7916 uid=0 auid=1055 ses=257837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652204.428:4245065): pid=7915 uid=0 auid=0 ses=257839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652204.430:4245066): pid=7915 uid=0 auid=0 ses=257839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674652217.614:4245067): avc: denied { name_connect } for pid=6984 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674652217.614:4245067): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdd61d2a80 a2=10 a3=7ffdd61d2a7c items=0 ppid=5547 pid=6984 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652217.614:4245067): proctitle="dovecot/auth"
type=AVC msg=audit(1674652217.625:4245068): avc: denied { write } for pid=7903 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674652217.625:4245068): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc48ad5620 a2=6e a3=63d12a39 items=0 ppid=5547 pid=7903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652217.625:4245068): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674652261.451:4245069): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652261.452:4245070): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652261.453:4245071): pid=8166 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257840 res=1
type=USER_START msg=audit(1674652261.472:4245072): pid=8166 uid=0 auid=1055 ses=257840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652261.474:4245073): pid=8166 uid=0 auid=1055 ses=257840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652261.803:4245074): pid=8166 uid=0 auid=1055 ses=257840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652261.806:4245075): pid=8166 uid=0 auid=1055 ses=257840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674652286.652:4245076): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=8288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652286.652:4245077): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=8288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652286.652:4245078): pid=8288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8288 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652286.807:4245079): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=8288 suid=74 rport=34188 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652286.807:4245080): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=8288 suid=74 rport=34188 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=USER_AUTH msg=audit(1674652289.596:4245081): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674652292.008:4245082): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674652293.701:4245083): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8288 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652293.701:4245084): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8288 suid=74 rport=34188 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652293.702:4245085): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=8286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652293.702:4245086): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=8286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652293.702:4245087): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8286 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674652293.702:4245088): pid=8286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674652321.824:4245089): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652321.825:4245090): pid=8420 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652321.825:4245091): pid=8420 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257841 res=1
type=USER_START msg=audit(1674652321.845:4245092): pid=8420 uid=0 auid=1055 ses=257841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652321.851:4245093): pid=8420 uid=0 auid=1055 ses=257841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652322.225:4245094): pid=8420 uid=0 auid=1055 ses=257841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652322.227:4245095): pid=8420 uid=0 auid=1055 ses=257841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674652367.283:4245096): avc: denied { read } for pid=8599 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674652367.283:4245096): avc: denied { open } for pid=8599 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674652367.283:4245096): arch=c000003e syscall=2 success=yes exit=18 a0=562894696f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=8599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652367.283:4245096): proctitle="dovecot/auth"
type=AVC msg=audit(1674652367.283:4245097): avc: denied { getattr } for pid=8599 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674652367.283:4245097): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd4ec60730 a2=7ffd4ec60730 a3=fffffc00 items=0 ppid=5547 pid=8599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652367.283:4245097): proctitle="dovecot/auth"
type=AVC msg=audit(1674652370.463:4245098): avc: denied { name_connect } for pid=8599 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674652370.463:4245098): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd4ec60520 a2=10 a3=7ffd4ec6051c items=0 ppid=5547 pid=8599 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652370.463:4245098): proctitle="dovecot/auth"
type=AVC msg=audit(1674652370.492:4245099): avc: denied { write } for pid=8607 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674652370.492:4245099): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff932f2910 a2=6e a3=63d12ad2 items=0 ppid=5547 pid=8607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652370.492:4245099): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674652381.241:4245100): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652381.241:4245101): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652381.241:4245102): pid=8648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652381.241:4245103): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652381.242:4245105): pid=8648 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257843 res=1
type=LOGIN msg=audit(1674652381.242:4245104): pid=8647 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257842 res=1
type=USER_START msg=audit(1674652381.274:4245106): pid=8647 uid=0 auid=0 ses=257842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674652381.275:4245107): pid=8648 uid=0 auid=1055 ses=257843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652381.275:4245108): pid=8648 uid=0 auid=1055 ses=257843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652381.276:4245109): pid=8647 uid=0 auid=0 ses=257842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652381.320:4245110): pid=8647 uid=0 auid=0 ses=257842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652381.323:4245111): pid=8647 uid=0 auid=0 ses=257842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674652381.397:4245112): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674652381.397:4245112): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5b16c84010 items=0 ppid=8660 pid=8670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652381.397:4245112): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3136302E392E3138002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431333A
type=CRED_DISP msg=audit(1674652381.529:4245113): pid=8648 uid=0 auid=1055 ses=257843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652381.531:4245114): pid=8648 uid=0 auid=1055 ses=257843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652441.546:4245115): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652441.546:4245116): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652441.547:4245117): pid=8860 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257844 res=1
type=USER_START msg=audit(1674652441.561:4245118): pid=8860 uid=0 auid=1055 ses=257844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652441.564:4245119): pid=8860 uid=0 auid=1055 ses=257844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652441.822:4245120): pid=8860 uid=0 auid=1055 ses=257844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652441.824:4245121): pid=8860 uid=0 auid=1055 ses=257844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674652478.738:4245122): avc: denied { read } for pid=9029 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674652478.738:4245122): avc: denied { open } for pid=9029 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674652478.738:4245122): arch=c000003e syscall=2 success=yes exit=18 a0=5566d649af70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=9029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652478.738:4245122): proctitle="dovecot/auth"
type=AVC msg=audit(1674652478.738:4245123): avc: denied { getattr } for pid=9029 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674652478.738:4245123): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffde83ac9d0 a2=7ffde83ac9d0 a3=fffffc00 items=0 ppid=5547 pid=9029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652478.738:4245123): proctitle="dovecot/auth"
type=AVC msg=audit(1674652481.599:4245124): avc: denied { write } for pid=9059 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674652481.599:4245124): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffb3f9fab0 a2=6e a3=63d12b41 items=0 ppid=5547 pid=9059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652481.599:4245124): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674652501.851:4245125): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652501.851:4245126): pid=9180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652501.852:4245127): pid=9180 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257845 res=1
type=USER_ACCT msg=audit(1674652501.875:4245128): pid=9181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652501.875:4245129): pid=9181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652501.875:4245130): pid=9181 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257846 res=1
type=USER_START msg=audit(1674652501.925:4245132): pid=9180 uid=0 auid=0 ses=257845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674652501.925:4245131): pid=9181 uid=0 auid=1055 ses=257846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652501.928:4245133): pid=9180 uid=0 auid=0 ses=257845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652501.928:4245134): pid=9181 uid=0 auid=1055 ses=257846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652502.273:4245135): pid=9181 uid=0 auid=1055 ses=257846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652502.293:4245136): pid=9181 uid=0 auid=1055 ses=257846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652505.330:4245137): pid=9180 uid=0 auid=0 ses=257845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652505.333:4245138): pid=9180 uid=0 auid=0 ses=257845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674652527.062:4245139): avc: denied { name_connect } for pid=9029 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674652527.062:4245139): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffde83ac7c0 a2=10 a3=7ffde83ac7bc items=0 ppid=5547 pid=9029 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652527.062:4245139): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674652536.102:4245140): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652536.102:4245141): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652536.102:4245142): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652536.488:4245143): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9316 suid=74 rport=54726 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652536.489:4245144): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9316 suid=74 rport=54726 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=? res=success'
type=USER_AUTH msg=audit(1674652538.170:4245145): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=191.80.215.233 addr=191.80.215.233 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674652539.429:4245146): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674652539.818:4245147): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9316 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652539.818:4245148): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9316 suid=74 rport=54726 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652539.819:4245149): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652539.819:4245150): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652539.819:4245151): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674652539.820:4245152): pid=9315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674652556.799:4245153): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652556.800:4245154): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652556.800:4245155): pid=9385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652557.102:4245156): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=9385 suid=74 rport=48730 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=102.114.43.162 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652557.102:4245157): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=9385 suid=74 rport=48730 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=102.114.43.162 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652557.429:4245158): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9385 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652557.429:4245159): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652557.430:4245160): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652557.430:4245161): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9383 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674652557.430:4245162): pid=9383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=102.114.43.162 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674652561.352:4245163): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652561.353:4245164): pid=9398 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652561.354:4245165): pid=9398 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257847 res=1
type=USER_START msg=audit(1674652561.372:4245166): pid=9398 uid=0 auid=1055 ses=257847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652561.374:4245167): pid=9398 uid=0 auid=1055 ses=257847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652561.629:4245168): pid=9398 uid=0 auid=1055 ses=257847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652561.631:4245169): pid=9398 uid=0 auid=1055 ses=257847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652621.647:4245170): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652621.647:4245171): pid=9581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652621.647:4245172): pid=9581 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257848 res=1
type=USER_START msg=audit(1674652621.661:4245173): pid=9581 uid=0 auid=1055 ses=257848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652621.663:4245174): pid=9581 uid=0 auid=1055 ses=257848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652621.970:4245175): pid=9581 uid=0 auid=1055 ses=257848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652621.972:4245176): pid=9581 uid=0 auid=1055 ses=257848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674652632.302:4245177): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652632.302:4245178): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652632.303:4245179): pid=9618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9618 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652632.503:4245180): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9618 suid=74 rport=9617 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.137.192.146 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652632.504:4245181): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9618 suid=74 rport=9617 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.137.192.146 terminal=? res=success'
type=USER_AUTH msg=audit(1674652633.460:4245182): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=110.137.192.146 addr=110.137.192.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674652635.763:4245183): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.137.192.146 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674652635.969:4245184): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9618 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652635.969:4245185): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9618 suid=74 rport=9617 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.137.192.146 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652635.970:4245186): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652635.970:4245187): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652635.970:4245188): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674652635.970:4245189): pid=9617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.137.192.146 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674652681.990:4245190): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652681.990:4245191): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652681.991:4245192): pid=9791 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257849 res=1
type=USER_START msg=audit(1674652682.005:4245193): pid=9791 uid=0 auid=1055 ses=257849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652682.007:4245194): pid=9791 uid=0 auid=1055 ses=257849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652682.289:4245195): pid=9791 uid=0 auid=1055 ses=257849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652682.291:4245196): pid=9791 uid=0 auid=1055 ses=257849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652741.313:4245197): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652741.313:4245198): pid=9998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652741.313:4245199): pid=9998 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257850 res=1
type=USER_START msg=audit(1674652741.360:4245200): pid=9998 uid=0 auid=1055 ses=257850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652741.361:4245201): pid=9998 uid=0 auid=1055 ses=257850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652741.723:4245202): pid=9998 uid=0 auid=1055 ses=257850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652741.725:4245203): pid=9998 uid=0 auid=1055 ses=257850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674652754.795:4245204): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652754.796:4245205): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652754.796:4245206): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10043 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652755.050:4245207): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10043 suid=74 rport=35958 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652755.050:4245208): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10043 suid=74 rport=35958 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=? res=success'
type=USER_AUTH msg=audit(1674652756.191:4245209): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=138.197.147.235 addr=138.197.147.235 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674652758.047:4245210): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674652758.304:4245211): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10043 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652758.304:4245212): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10043 suid=74 rport=35958 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652758.306:4245213): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652758.306:4245214): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652758.306:4245215): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10042 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674652758.306:4245216): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=ssh res=failed'
type=AVC msg=audit(1674652761.701:4245217): avc: denied { read } for pid=10069 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674652761.701:4245217): avc: denied { open } for pid=10069 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674652761.701:4245217): arch=c000003e syscall=2 success=yes exit=18 a0=55c0553f6f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=10069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652761.701:4245217): proctitle="dovecot/auth"
type=AVC msg=audit(1674652761.701:4245218): avc: denied { getattr } for pid=10069 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674652761.701:4245218): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe720a61f0 a2=7ffe720a61f0 a3=fffffc00 items=0 ppid=5547 pid=10069 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652761.701:4245218): proctitle="dovecot/auth"
type=AVC msg=audit(1674652763.726:4245219): avc: denied { name_connect } for pid=10069 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674652763.726:4245219): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe720a5fe0 a2=10 a3=7ffe720a5fdc items=0 ppid=5547 pid=10069 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652763.726:4245219): proctitle="dovecot/auth"
type=AVC msg=audit(1674652763.756:4245220): avc: denied { write } for pid=10077 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674652763.756:4245220): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff3ad6c800 a2=6e a3=63d12c5b items=0 ppid=5547 pid=10077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652763.756:4245220): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674652801.743:4245222): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652801.743:4245221): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674652801.743:4245223): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652801.743:4245224): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652801.743:4245226): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652801.743:4245225): pid=10205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652801.743:4245227): pid=10204 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257851 res=1
type=LOGIN msg=audit(1674652801.743:4245228): pid=10203 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257853 res=1
type=LOGIN msg=audit(1674652801.743:4245229): pid=10205 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257852 res=1
type=USER_ACCT msg=audit(1674652801.743:4245230): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652801.744:4245231): pid=10206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652801.750:4245232): pid=10206 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257854 res=1
type=USER_START msg=audit(1674652801.888:4245233): pid=10203 uid=0 auid=0 ses=257853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674652801.889:4245234): pid=10205 uid=0 auid=0 ses=257852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674652801.889:4245235): pid=10206 uid=0 auid=1055 ses=257854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674652801.889:4245236): pid=10204 uid=0 auid=0 ses=257851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652801.889:4245237): pid=10205 uid=0 auid=0 ses=257852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652801.889:4245238): pid=10206 uid=0 auid=1055 ses=257854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652801.889:4245239): pid=10203 uid=0 auid=0 ses=257853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652801.889:4245240): pid=10204 uid=0 auid=0 ses=257851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652801.996:4245241): pid=10203 uid=0 auid=0 ses=257853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652801.999:4245242): pid=10205 uid=0 auid=0 ses=257852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652802.002:4245243): pid=10203 uid=0 auid=0 ses=257853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652802.003:4245244): pid=10205 uid=0 auid=0 ses=257852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652802.276:4245245): pid=10206 uid=0 auid=1055 ses=257854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652802.282:4245246): pid=10206 uid=0 auid=1055 ses=257854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674652803.769:4245247): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674652803.769:4245247): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b92fc285010 items=0 ppid=1588 pid=10243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.769:4245247): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131362E3131342E39342E33302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A32323A3331002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.774:4245248): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674652803.774:4245248): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b85eaebf010 items=0 ppid=1588 pid=10244 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.774:4245248): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035382E3231362E3130312E3136322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A33303A3532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.778:4245249): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674652803.778:4245249): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6dca6b0010 items=0 ppid=1588 pid=10245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.778:4245249): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231392E3133312E3137322E3133382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A33323A3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.783:4245250): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674652803.783:4245250): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b3395465010 items=0 ppid=1588 pid=10246 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.783:4245250): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134372E3134382E32382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A33343A3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.788:4245251): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674652803.788:4245251): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b8d704d6010 items=0 ppid=1588 pid=10247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.788:4245251): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232332E37352E3137332E36362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A34313A3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.794:4245252): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674652803.794:4245252): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6d10a8e010 items=0 ppid=1588 pid=10248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.794:4245252): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3137342E3136362E3135302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A35313A3030002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.800:4245253): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674652803.800:4245253): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b32ad395010 items=0 ppid=1588 pid=10249 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.800:4245253): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033362E3135322E35322E3233342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431323A35353A3532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.805:4245254): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674652803.805:4245254): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aacc864d010 items=0 ppid=1588 pid=10250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.805:4245254): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E302E3131312E3131332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A30313A3238002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.809:4245255): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674652803.809:4245255): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad53d44e010 items=0 ppid=1588 pid=10251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.809:4245255): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E37312E3230302E3133382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A30313A3338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.813:4245256): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674652803.813:4245256): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b3f95005010 items=0 ppid=1588 pid=10252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.813:4245256): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3132382E34382E3139372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A30313A3435002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.818:4245257): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674652803.818:4245257): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b89ecd52010 items=0 ppid=1588 pid=10253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.818:4245257): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E32392E3130392E34392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A30333A3030002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.822:4245258): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674652803.822:4245258): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2afcdab7c010 items=0 ppid=1588 pid=10254 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.822:4245258): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3133342E3130302E34362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A31323A3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652803.826:4245259): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674652803.826:4245259): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b5202ecd010 items=0 ppid=1588 pid=10255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652803.826:4245259): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138352E3134302E3139342E3232362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A31343A3130002D6A0044524F50
type=CRED_DISP msg=audit(1674652805.313:4245260): pid=10204 uid=0 auid=0 ses=257851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652805.315:4245261): pid=10204 uid=0 auid=0 ses=257851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674652810.593:4245262): pid=10279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652810.593:4245263): pid=10279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652810.593:4245264): pid=10279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10279 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652810.971:4245265): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10279 suid=74 rport=53490 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652810.971:4245266): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10279 suid=74 rport=53490 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=? res=success'
type=USER_AUTH msg=audit(1674652812.618:4245267): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=191.80.215.233 addr=191.80.215.233 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674652815.161:4245268): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674652815.543:4245269): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10279 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652815.543:4245270): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10279 suid=74 rport=53490 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652815.544:4245271): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652815.544:4245272): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652815.544:4245273): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10278 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674652815.544:4245274): pid=10278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=191.80.215.233 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674652816.603:4245275): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674652816.603:4245275): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff674d99010 items=0 ppid=10301 pid=10304 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652816.603:4245275): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674652816.608:4245276): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674652816.608:4245276): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f40ff0e8010 items=0 ppid=10301 pid=10305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652816.608:4245276): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674652816.613:4245277): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674652816.613:4245277): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8b0c738010 items=0 ppid=10301 pid=10306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652816.613:4245277): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674652816.619:4245278): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674652816.619:4245278): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd4bf470010 items=0 ppid=10301 pid=10307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652816.619:4245278): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674652816.918:4245279): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674652816.918:4245279): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f63933e5010 items=0 ppid=10301 pid=10315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652816.918:4245279): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003139382E34362E3231352E3533002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652816.925:4245280): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674652816.925:4245280): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc2dc49b010 items=0 ppid=10301 pid=10316 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652816.925:4245280): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003139382E34362E3231352E3533002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674652816.931:4245281): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674652816.931:4245281): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe509e6b010 items=0 ppid=10301 pid=10317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652816.931:4245281): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003139312E38302E3231352E323333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652816.936:4245282): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674652816.936:4245282): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f656622d010 items=0 ppid=10301 pid=10318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652816.936:4245282): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003139312E38302E3231352E323333002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674652817.931:4245283): avc: denied { name_connect } for pid=10069 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674652817.931:4245283): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe720a5fe0 a2=10 a3=7ffe720a5fdc items=0 ppid=5547 pid=10069 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652817.931:4245283): proctitle="dovecot/auth"
type=AVC msg=audit(1674652817.942:4245284): avc: denied { write } for pid=10077 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674652817.942:4245284): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff3ad6c800 a2=6e a3=63d12c91 items=0 ppid=5547 pid=10077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652817.942:4245284): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674652837.279:4245285): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652837.279:4245286): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652837.279:4245287): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652837.533:4245288): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10498 suid=74 rport=33514 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652837.533:4245289): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10498 suid=74 rport=33514 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=? res=success'
type=USER_AUTH msg=audit(1674652838.687:4245290): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=138.197.147.235 addr=138.197.147.235 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674652840.802:4245291): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674652841.060:4245292): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10498 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652841.060:4245293): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10498 suid=74 rport=33514 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652841.061:4245294): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652841.061:4245295): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652841.061:4245296): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10497 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674652841.061:4245297): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=138.197.147.235 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674652841.280:4245298): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674652841.280:4245298): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff05caf6010 items=0 ppid=10530 pid=10533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652841.280:4245298): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674652841.285:4245299): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674652841.285:4245299): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd171029010 items=0 ppid=10530 pid=10534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652841.285:4245299): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674652841.289:4245300): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674652841.289:4245300): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe1cd7a8010 items=0 ppid=10530 pid=10535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652841.289:4245300): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674652841.293:4245301): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674652841.293:4245301): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f38b7c25010 items=0 ppid=10530 pid=10536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652841.293:4245301): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674652841.710:4245302): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674652841.710:4245302): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0bf6f9f010 items=0 ppid=10530 pid=10544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652841.710:4245302): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003130342E3234342E37342E36002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652841.717:4245303): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674652841.717:4245303): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6ce1756010 items=0 ppid=10530 pid=10545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652841.717:4245303): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003130342E3234342E37342E36002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674652841.723:4245304): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674652841.723:4245304): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f08cfcd9010 items=0 ppid=10530 pid=10546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652841.723:4245304): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003133382E3139372E3134372E323335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652841.728:4245305): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674652841.728:4245305): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f723b7b4010 items=0 ppid=10530 pid=10547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652841.728:4245305): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003133382E3139372E3134372E323335002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674652858.740:4245306): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652858.740:4245307): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652858.740:4245308): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652858.913:4245309): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10606 suid=74 rport=6553 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.137.192.146 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652858.913:4245310): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10606 suid=74 rport=6553 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=110.137.192.146 terminal=? res=success'
type=USER_AUTH msg=audit(1674652859.744:4245311): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=110.137.192.146 addr=110.137.192.146 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674652861.337:4245312): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652861.337:4245313): pid=10625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652861.338:4245314): pid=10625 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257855 res=1
type=USER_START msg=audit(1674652861.365:4245315): pid=10625 uid=0 auid=1055 ses=257855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652861.367:4245316): pid=10625 uid=0 auid=1055 ses=257855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652861.747:4245317): pid=10625 uid=0 auid=1055 ses=257855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652861.760:4245318): pid=10625 uid=0 auid=1055 ses=257855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674652861.906:4245319): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674652861.906:4245319): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1e9d60c010 items=0 ppid=10633 pid=10638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652861.906:4245319): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674652861.912:4245320): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674652861.912:4245320): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0ff3d49010 items=0 ppid=10633 pid=10639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652861.912:4245320): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674652861.919:4245321): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674652861.919:4245321): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbeae6d5010 items=0 ppid=10633 pid=10640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652861.919:4245321): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674652861.926:4245322): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674652861.926:4245322): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8c40ee0010 items=0 ppid=10633 pid=10641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652861.926:4245322): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674652862.302:4245323): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674652862.302:4245323): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa766de0010 items=0 ppid=10633 pid=10649 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652862.302:4245323): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003231372E3231322E3231302E3331002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652862.311:4245324): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674652862.311:4245324): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8a3a8d1010 items=0 ppid=10633 pid=10650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652862.311:4245324): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003231372E3231322E3231302E3331002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674652862.319:4245325): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674652862.319:4245325): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f277491f010 items=0 ppid=10633 pid=10652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652862.319:4245325): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003131302E3133372E3139322E313436002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674652862.328:4245326): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674652862.328:4245326): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff99a2d2010 items=0 ppid=10633 pid=10653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652862.328:4245326): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003131302E3133372E3139322E313436002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674652862.409:4245327): pid=10605 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=110.137.192.146 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674652865.206:4245328): pid=10668 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.206:4245329): pid=10668 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.206:4245330): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.229:4245331): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.232:4245332): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.232:4245333): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.256:4245334): pid=10673 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.256:4245335): pid=10673 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.256:4245336): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.270:4245337): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.273:4245338): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.273:4245339): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.298:4245340): pid=10676 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.299:4245341): pid=10676 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.299:4245342): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.320:4245343): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.324:4245344): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.324:4245345): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.453:4245346): pid=10684 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.453:4245347): pid=10684 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.454:4245348): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.470:4245349): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.474:4245350): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.474:4245351): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.495:4245352): pid=10687 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.495:4245353): pid=10687 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.495:4245354): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.509:4245355): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.511:4245356): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.511:4245357): pid=10687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.534:4245358): pid=10692 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.534:4245359): pid=10692 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.534:4245360): pid=10692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.547:4245361): pid=10692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.549:4245362): pid=10692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.549:4245363): pid=10692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.579:4245364): pid=10698 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.579:4245365): pid=10698 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.579:4245366): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.593:4245367): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.596:4245368): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.596:4245369): pid=10698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.616:4245370): pid=10703 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.616:4245371): pid=10703 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.616:4245372): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.629:4245373): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.632:4245374): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.633:4245375): pid=10703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.653:4245376): pid=10707 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.653:4245377): pid=10707 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.653:4245378): pid=10707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.668:4245379): pid=10707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.670:4245380): pid=10707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.670:4245381): pid=10707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.690:4245382): pid=10713 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.690:4245383): pid=10713 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.690:4245384): pid=10713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.704:4245385): pid=10713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.707:4245386): pid=10713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.707:4245387): pid=10713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652865.728:4245388): pid=10718 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652865.728:4245389): pid=10718 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674652865.728:4245390): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652865.741:4245391): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652865.744:4245392): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652865.744:4245393): pid=10718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652867.908:4245394): pid=10731 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652867.908:4245395): pid=10731 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674652867.909:4245396): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652867.923:4245397): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652867.987:4245398): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652867.987:4245399): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652868.024:4245400): pid=10738 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652868.024:4245401): pid=10738 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674652868.025:4245402): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652868.040:4245403): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652868.126:4245404): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652868.126:4245405): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652868.149:4245406): pid=10744 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652868.150:4245407): pid=10744 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652868.150:4245408): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652868.164:4245409): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652868.305:4245410): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652868.306:4245411): pid=10744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652868.342:4245412): pid=10751 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652868.343:4245413): pid=10751 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674652868.343:4245414): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652868.361:4245415): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652868.364:4245416): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652868.365:4245417): pid=10751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652868.392:4245418): pid=10756 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652868.392:4245419): pid=10756 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D65426B655943615659744B734A49506F2E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674652868.392:4245420): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652868.405:4245421): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652868.408:4245422): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652868.409:4245423): pid=10756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652868.430:4245424): pid=10759 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652868.431:4245425): pid=10759 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D65426B655943615659744B734A49506F2E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674652868.431:4245426): pid=10759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652868.445:4245427): pid=10759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652868.451:4245428): pid=10759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652868.451:4245429): pid=10759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652868.474:4245430): pid=10766 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652868.474:4245431): pid=10766 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D65426B655943615659744B734A49506F2E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674652868.474:4245432): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652868.488:4245433): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652868.492:4245434): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652868.492:4245435): pid=10766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652868.513:4245436): pid=10772 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652868.514:4245437): pid=10772 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674652868.514:4245438): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652868.527:4245439): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652868.532:4245440): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652868.533:4245441): pid=10772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652877.403:4245442): pid=10810 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652877.404:4245443): pid=10810 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674652877.404:4245444): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652877.419:4245445): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652877.422:4245446): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652877.422:4245447): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652878.326:4245448): pid=10819 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652878.326:4245449): pid=10819 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674652878.327:4245450): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652878.345:4245451): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652878.349:4245452): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652878.349:4245453): pid=10819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652878.372:4245454): pid=10823 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652878.373:4245455): pid=10823 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674652878.373:4245456): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652878.394:4245457): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652878.397:4245458): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652878.397:4245459): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652878.422:4245460): pid=10829 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652878.422:4245461): pid=10829 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674652878.422:4245462): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652878.443:4245463): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652878.447:4245464): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652878.447:4245465): pid=10829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652878.483:4245466): pid=10835 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652878.483:4245467): pid=10835 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674652878.483:4245468): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652878.504:4245469): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652878.645:4245470): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652878.646:4245471): pid=10835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652879.634:4245472): pid=10842 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652879.634:4245473): pid=10842 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674652879.634:4245474): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652879.655:4245475): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652879.720:4245476): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652879.721:4245477): pid=10842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652879.758:4245478): pid=10852 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652879.758:4245479): pid=10852 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652879.758:4245480): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652879.773:4245481): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652880.945:4245482): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652880.945:4245483): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652881.146:4245484): pid=10860 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652881.147:4245485): pid=10860 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652881.147:4245486): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652881.163:4245487): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652882.389:4245488): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652882.389:4245489): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652882.603:4245490): pid=10872 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652882.603:4245491): pid=10872 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652882.604:4245492): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652882.618:4245493): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652884.312:4245494): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652884.312:4245495): pid=10872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652884.559:4245496): pid=10885 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652884.560:4245497): pid=10885 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652884.560:4245498): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652884.572:4245499): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652885.793:4245500): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652885.793:4245501): pid=10885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652885.912:4245502): pid=10898 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652885.913:4245503): pid=10898 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652885.913:4245504): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652885.932:4245505): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652886.324:4245506): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652886.324:4245507): pid=10898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652886.481:4245508): pid=10924 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652886.482:4245509): pid=10924 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652886.482:4245510): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652886.496:4245511): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652888.764:4245512): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652888.764:4245513): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652889.046:4245514): pid=10942 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652889.046:4245515): pid=10942 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652889.046:4245516): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652889.062:4245517): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652890.216:4245518): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652890.216:4245519): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652890.467:4245520): pid=10956 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652890.468:4245521): pid=10956 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652890.468:4245522): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652890.483:4245523): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652891.589:4245524): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652891.590:4245525): pid=10956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674652892.443:4245526): pid=10969 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674652892.443:4245527): pid=10969 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674652892.443:4245528): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674652892.462:4245529): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674652893.504:4245530): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674652893.505:4245531): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674652899.497:4245532): avc: denied { name_connect } for pid=10069 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674652899.497:4245532): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe720a5fe0 a2=10 a3=7ffe720a5fdc items=0 ppid=5547 pid=10069 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652899.497:4245532): proctitle="dovecot/auth"
type=AVC msg=audit(1674652899.541:4245533): avc: denied { write } for pid=10992 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674652899.541:4245533): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc0177c2e0 a2=6e a3=63d12ce3 items=0 ppid=5547 pid=10992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674652899.541:4245533): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674652911.339:4245534): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652911.339:4245535): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652911.339:4245536): pid=11030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11030 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652911.653:4245537): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=11030 suid=74 rport=55384 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=176.111.173.164 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674652911.653:4245538): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=11030 suid=74 rport=55384 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=176.111.173.164 terminal=? res=success'
type=USER_AUTH msg=audit(1674652913.130:4245539): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=none acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=176.111.173.164 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674652916.409:4245540): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=176.111.173.164 addr=176.111.173.164 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674652918.565:4245541): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=176.111.173.164 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674652921.783:4245542): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652921.783:4245543): pid=11056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652921.784:4245544): pid=11056 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257856 res=1
type=USER_START msg=audit(1674652921.802:4245545): pid=11056 uid=0 auid=1055 ses=257856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652921.805:4245546): pid=11056 uid=0 auid=1055 ses=257856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674652921.817:4245547): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=176.111.173.164 addr=176.111.173.164 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674652922.087:4245548): pid=11056 uid=0 auid=1055 ses=257856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652922.091:4245549): pid=11056 uid=0 auid=1055 ses=257856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674652923.326:4245550): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=176.111.173.164 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674652926.587:4245551): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11030 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652926.587:4245552): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11030 suid=74 rport=55384 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=176.111.173.164 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652926.589:4245553): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652926.589:4245554): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674652926.589:4245555): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11029 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674652926.589:4245556): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=176.111.173.164 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674652981.108:4245557): pid=11245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674652981.108:4245558): pid=11245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674652981.108:4245559): pid=11245 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257857 res=1
type=USER_START msg=audit(1674652981.124:4245560): pid=11245 uid=0 auid=1055 ses=257857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674652981.126:4245561): pid=11245 uid=0 auid=1055 ses=257857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674652981.432:4245562): pid=11245 uid=0 auid=1055 ses=257857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674652981.434:4245563): pid=11245 uid=0 auid=1055 ses=257857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653041.447:4245564): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653041.447:4245565): pid=11436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653041.447:4245566): pid=11436 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257858 res=1
type=USER_START msg=audit(1674653041.458:4245567): pid=11436 uid=0 auid=1055 ses=257858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653041.460:4245568): pid=11436 uid=0 auid=1055 ses=257858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653041.783:4245569): pid=11436 uid=0 auid=1055 ses=257858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653041.784:4245570): pid=11436 uid=0 auid=1055 ses=257858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674653067.013:4245571): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653067.013:4245572): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653067.013:4245573): pid=11534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674653067.240:4245574): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=11534 suid=74 rport=61030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.24.6.146 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674653067.240:4245575): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=11534 suid=74 rport=61030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.24.6.146 terminal=? res=success'
type=USER_AUTH msg=audit(1674653069.200:4245576): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.24.6.146 addr=59.24.6.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653071.693:4245577): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.24.6.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653072.185:4245578): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.24.6.146 addr=59.24.6.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653074.091:4245579): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.24.6.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653075.039:4245580): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.24.6.146 addr=59.24.6.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653077.357:4245581): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.24.6.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653077.846:4245582): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.24.6.146 addr=59.24.6.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653079.436:4245583): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.24.6.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653080.361:4245584): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.24.6.146 addr=59.24.6.146 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674653081.557:4245585): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674653081.557:4245585): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f447cb31010 items=0 ppid=11588 pid=11591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653081.557:4245585): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674653081.561:4245586): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674653081.561:4245586): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdaca8ae010 items=0 ppid=11588 pid=11592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653081.561:4245586): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674653081.565:4245587): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674653081.565:4245587): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8961708010 items=0 ppid=11588 pid=11593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653081.565:4245587): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674653081.569:4245588): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674653081.569:4245588): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f756689f010 items=0 ppid=11588 pid=11594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653081.569:4245588): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674653081.881:4245589): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674653081.881:4245589): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0ad9431010 items=0 ppid=11588 pid=11604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653081.881:4245589): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232332E3139372E3137352E3931002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674653081.889:4245590): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674653081.889:4245590): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2b74f22010 items=0 ppid=11588 pid=11605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653081.889:4245590): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232332E3139372E3137352E3931002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674653081.899:4245591): table=filter family=2 entries=1025
type=SYSCALL msg=audit(1674653081.899:4245591): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6fde17c010 items=0 ppid=11588 pid=11606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653081.899:4245591): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035392E32342E362E313436002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674653081.908:4245592): table=filter family=2 entries=1026
type=SYSCALL msg=audit(1674653081.908:4245592): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd0924fd010 items=0 ppid=11588 pid=11607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653081.908:4245592): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035392E32342E362E313436002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674653082.362:4245593): pid=11533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.24.6.146 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674653101.807:4245595): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653101.807:4245594): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653101.807:4245596): pid=11663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653101.807:4245597): pid=11662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653101.809:4245598): pid=11663 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257859 res=1
type=LOGIN msg=audit(1674653101.810:4245599): pid=11662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257860 res=1
type=USER_START msg=audit(1674653101.894:4245600): pid=11662 uid=0 auid=0 ses=257860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674653101.894:4245601): pid=11663 uid=0 auid=1055 ses=257859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653101.894:4245602): pid=11663 uid=0 auid=1055 ses=257859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653101.894:4245603): pid=11662 uid=0 auid=0 ses=257860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653102.345:4245604): pid=11663 uid=0 auid=1055 ses=257859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653102.348:4245605): pid=11663 uid=0 auid=1055 ses=257859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653105.354:4245606): pid=11662 uid=0 auid=0 ses=257860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653105.355:4245607): pid=11662 uid=0 auid=0 ses=257860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674653111.665:4245608): avc: denied { read } for pid=11704 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674653111.665:4245608): avc: denied { open } for pid=11704 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653111.665:4245608): arch=c000003e syscall=2 success=yes exit=18 a0=5560de38df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=11704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653111.665:4245608): proctitle="dovecot/auth"
type=AVC msg=audit(1674653111.665:4245609): avc: denied { getattr } for pid=11704 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653111.665:4245609): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe9c33b910 a2=7ffe9c33b910 a3=fffffc00 items=0 ppid=5547 pid=11704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653111.665:4245609): proctitle="dovecot/auth"
type=AVC msg=audit(1674653113.777:4245610): avc: denied { name_connect } for pid=11704 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674653113.777:4245610): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe9c33b700 a2=10 a3=7ffe9c33b6fc items=0 ppid=5547 pid=11704 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653113.777:4245610): proctitle="dovecot/auth"
type=AVC msg=audit(1674653113.806:4245611): avc: denied { write } for pid=11712 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674653113.806:4245611): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff02d65970 a2=6e a3=63d12db9 items=0 ppid=5547 pid=11712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653113.806:4245611): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674653118.303:4245612): avc: denied { read append } for pid=11762 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674653118.303:4245612): avc: denied { open } for pid=11762 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653118.303:4245612): arch=c000003e syscall=2 success=yes exit=8 a0=556572320a60 a1=402 a2=7fff0ba1b660 a3=7fff0ba1b0e0 items=0 ppid=5547 pid=11762 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653118.303:4245612): proctitle="dovecot/imap"
type=AVC msg=audit(1674653118.303:4245613): avc: denied { getattr } for pid=11762 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653118.303:4245613): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff0ba1b5c0 a2=7fff0ba1b5c0 a3=7fff0ba1b020 items=0 ppid=5547 pid=11762 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653118.303:4245613): proctitle="dovecot/imap"
type=AVC msg=audit(1674653118.303:4245614): avc: denied { write } for pid=11762 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653118.303:4245614): arch=c000003e syscall=2 success=yes exit=10 a0=556572325990 a1=2 a2=7fff0ba1b360 a3=7fff0ba1ae20 items=0 ppid=5547 pid=11762 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653118.303:4245614): proctitle="dovecot/imap"
type=AVC msg=audit(1674653118.304:4245615): avc: denied { lock } for pid=11762 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653118.304:4245615): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff0ba1b260 a3=63d12dbe items=0 ppid=5547 pid=11762 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653118.304:4245615): proctitle="dovecot/imap"
type=AVC msg=audit(1674653118.304:4245616): avc: denied { read } for pid=11762 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674653118.304:4245616): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55657234e300 a2=90800 a3=0 items=0 ppid=5547 pid=11762 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653118.304:4245616): proctitle="dovecot/imap"
type=AVC msg=audit(1674653118.304:4245617): avc: denied { getattr } for pid=11762 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653118.304:4245617): arch=c000003e syscall=4 success=yes exit=0 a0=556572310a60 a1=7fff0ba1b610 a2=7fff0ba1b610 a3=6f632e6f72676173 items=0 ppid=5547 pid=11762 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653118.304:4245617): proctitle="dovecot/imap"
type=AVC msg=audit(1674653120.323:4245618): avc: denied { write } for pid=11794 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674653120.323:4245618): arch=c000003e syscall=21 success=yes exit=0 a0=55cd7b9794c0 a1=2 a2=7b48 a3=7ffe1198c4a0 items=0 ppid=5547 pid=11794 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653120.323:4245618): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674653161.380:4245619): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653161.381:4245620): pid=11979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653161.382:4245621): pid=11979 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257861 res=1
type=USER_START msg=audit(1674653161.406:4245622): pid=11979 uid=0 auid=1055 ses=257861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653161.410:4245623): pid=11979 uid=0 auid=1055 ses=257861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653161.697:4245624): pid=11979 uid=0 auid=1055 ses=257861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653161.701:4245625): pid=11979 uid=0 auid=1055 ses=257861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674653190.505:4245626): pid=12081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653190.505:4245627): pid=12081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653190.505:4245628): pid=12081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674653221.719:4245629): pid=12163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653221.719:4245630): pid=12163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653221.719:4245631): pid=12163 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257862 res=1
type=USER_START msg=audit(1674653221.736:4245632): pid=12163 uid=0 auid=1055 ses=257862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653221.737:4245633): pid=12163 uid=0 auid=1055 ses=257862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653222.096:4245634): pid=12163 uid=0 auid=1055 ses=257862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653222.101:4245635): pid=12163 uid=0 auid=1055 ses=257862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653281.115:4245637): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653281.115:4245636): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653281.115:4245639): pid=12363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653281.115:4245638): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653281.115:4245640): pid=12363 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257863 res=1
type=LOGIN msg=audit(1674653281.116:4245641): pid=12364 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257864 res=1
type=USER_START msg=audit(1674653281.153:4245642): pid=12363 uid=0 auid=0 ses=257863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674653281.153:4245643): pid=12364 uid=0 auid=1055 ses=257864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653281.155:4245644): pid=12363 uid=0 auid=0 ses=257863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653281.155:4245645): pid=12364 uid=0 auid=1055 ses=257864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653281.219:4245646): pid=12363 uid=0 auid=0 ses=257863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653281.226:4245647): pid=12363 uid=0 auid=0 ses=257863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653281.454:4245648): pid=12364 uid=0 auid=1055 ses=257864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653281.456:4245649): pid=12364 uid=0 auid=1055 ses=257864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674653281.773:4245650): avc: denied { read } for pid=12379 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674653281.773:4245650): avc: denied { open } for pid=12379 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653281.773:4245650): arch=c000003e syscall=2 success=yes exit=18 a0=560834d86f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=12379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653281.773:4245650): proctitle="dovecot/auth"
type=AVC msg=audit(1674653281.773:4245651): avc: denied { getattr } for pid=12379 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653281.773:4245651): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffea8ff5de0 a2=7ffea8ff5de0 a3=fffffc00 items=0 ppid=5547 pid=12379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653281.773:4245651): proctitle="dovecot/auth"
type=AVC msg=audit(1674653283.087:4245652): avc: denied { name_connect } for pid=12379 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674653283.087:4245652): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffea8ff5bd0 a2=10 a3=7ffea8ff5bcc items=0 ppid=5547 pid=12379 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653283.087:4245652): proctitle="dovecot/auth"
type=AVC msg=audit(1674653283.120:4245653): avc: denied { write } for pid=12384 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674653283.120:4245653): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff56390a70 a2=6e a3=63d12e63 items=0 ppid=5547 pid=12384 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653283.120:4245653): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674653341.475:4245654): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653341.476:4245655): pid=12569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653341.478:4245656): pid=12569 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257865 res=1
type=USER_START msg=audit(1674653341.493:4245657): pid=12569 uid=0 auid=1055 ses=257865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653341.494:4245658): pid=12569 uid=0 auid=1055 ses=257865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653341.853:4245659): pid=12569 uid=0 auid=1055 ses=257865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653341.855:4245660): pid=12569 uid=0 auid=1055 ses=257865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653401.880:4245661): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653401.880:4245662): pid=12760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653401.880:4245663): pid=12760 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257866 res=1
type=USER_ACCT msg=audit(1674653401.880:4245664): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653401.880:4245665): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653401.880:4245666): pid=12761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257867 res=1
type=USER_ACCT msg=audit(1674653401.885:4245667): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653401.885:4245668): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653401.885:4245669): pid=12762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257868 res=1
type=USER_START msg=audit(1674653402.055:4245670): pid=12762 uid=0 auid=1055 ses=257868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674653402.055:4245671): pid=12760 uid=0 auid=0 ses=257866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674653402.058:4245672): pid=12761 uid=0 auid=0 ses=257867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653402.064:4245673): pid=12760 uid=0 auid=0 ses=257866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653402.064:4245674): pid=12762 uid=0 auid=1055 ses=257868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653402.076:4245675): pid=12761 uid=0 auid=0 ses=257867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653402.179:4245676): pid=12760 uid=0 auid=0 ses=257866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653402.197:4245677): pid=12760 uid=0 auid=0 ses=257866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653402.703:4245678): pid=12762 uid=0 auid=1055 ses=257868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653402.714:4245679): pid=12762 uid=0 auid=1055 ses=257868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653405.678:4245680): pid=12761 uid=0 auid=0 ses=257867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653405.680:4245681): pid=12761 uid=0 auid=0 ses=257867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674653419.334:4245682): avc: denied { name_connect } for pid=12751 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674653419.334:4245682): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc06d8b8b0 a2=10 a3=7ffc06d8b8ac items=0 ppid=5547 pid=12751 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653419.334:4245682): proctitle="dovecot/auth"
type=AVC msg=audit(1674653419.374:4245683): avc: denied { write } for pid=12846 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674653419.374:4245683): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffdaffe920 a2=6e a3=63d12eeb items=0 ppid=5547 pid=12846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653419.374:4245683): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674653439.682:4245684): avc: denied { write } for pid=12846 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674653439.682:4245684): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffdaffe920 a2=6e a3=63d12eff items=0 ppid=5547 pid=12846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653439.682:4245684): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674653461.705:4245685): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653461.706:4245686): pid=13096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653461.707:4245687): pid=13096 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257869 res=1
type=USER_START msg=audit(1674653461.727:4245688): pid=13096 uid=0 auid=1055 ses=257869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653461.729:4245689): pid=13096 uid=0 auid=1055 ses=257869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653462.068:4245690): pid=13096 uid=0 auid=1055 ses=257869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653462.087:4245691): pid=13096 uid=0 auid=1055 ses=257869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674653496.603:4245692): avc: denied { name_connect } for pid=12751 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674653496.603:4245692): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc06d8b8b0 a2=10 a3=7ffc06d8b8ac items=0 ppid=5547 pid=12751 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653496.603:4245692): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674653521.113:4245693): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653521.113:4245694): pid=13314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653521.113:4245695): pid=13314 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257870 res=1
type=USER_START msg=audit(1674653521.129:4245696): pid=13314 uid=0 auid=1055 ses=257870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653521.131:4245697): pid=13314 uid=0 auid=1055 ses=257870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653521.385:4245698): pid=13314 uid=0 auid=1055 ses=257870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653521.387:4245699): pid=13314 uid=0 auid=1055 ses=257870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674653537.165:4245700): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674653537.165:4245700): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b60db4ca010 items=0 ppid=13369 pid=13374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653537.165:4245700): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138302E37362E3139352E323130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674653541.124:4245701): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674653541.124:4245701): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab2d9585010 items=0 ppid=13390 pid=13396 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653541.124:4245701): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003230322E3130322E3233332E3231002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674653581.400:4245702): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653581.401:4245703): pid=13539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653581.402:4245704): pid=13539 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257871 res=1
type=USER_START msg=audit(1674653581.414:4245705): pid=13539 uid=0 auid=1055 ses=257871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653581.415:4245706): pid=13539 uid=0 auid=1055 ses=257871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653581.697:4245707): pid=13539 uid=0 auid=1055 ses=257871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653581.699:4245708): pid=13539 uid=0 auid=1055 ses=257871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653641.714:4245709): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653641.715:4245710): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653641.715:4245711): pid=13730 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257872 res=1
type=USER_START msg=audit(1674653641.738:4245712): pid=13730 uid=0 auid=1055 ses=257872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653641.739:4245713): pid=13730 uid=0 auid=1055 ses=257872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653642.004:4245714): pid=13730 uid=0 auid=1055 ses=257872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653642.006:4245715): pid=13730 uid=0 auid=1055 ses=257872 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674653655.602:4245716): avc: denied { read } for pid=13777 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674653655.602:4245716): avc: denied { open } for pid=13777 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653655.602:4245716): arch=c000003e syscall=2 success=yes exit=18 a0=55fcd8811f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=13777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653655.602:4245716): proctitle="dovecot/auth"
type=AVC msg=audit(1674653655.602:4245717): avc: denied { getattr } for pid=13777 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653655.602:4245717): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff7905a7f0 a2=7fff7905a7f0 a3=fffffc00 items=0 ppid=5547 pid=13777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653655.602:4245717): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674653701.020:4245718): pid=13949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653701.020:4245719): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653701.020:4245720): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653701.020:4245721): pid=13946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653701.021:4245722): pid=13948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653701.021:4245723): pid=13947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653701.021:4245724): pid=13946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653701.021:4245725): pid=13949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653701.021:4245726): pid=13948 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257873 res=1
type=LOGIN msg=audit(1674653701.021:4245728): pid=13946 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257874 res=1
type=LOGIN msg=audit(1674653701.021:4245727): pid=13947 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257875 res=1
type=LOGIN msg=audit(1674653701.021:4245729): pid=13949 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257876 res=1
type=USER_START msg=audit(1674653701.063:4245730): pid=13946 uid=0 auid=0 ses=257874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674653701.064:4245731): pid=13948 uid=0 auid=0 ses=257873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674653701.064:4245732): pid=13949 uid=0 auid=1055 ses=257876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653701.065:4245733): pid=13948 uid=0 auid=0 ses=257873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653701.065:4245734): pid=13949 uid=0 auid=1055 ses=257876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674653701.066:4245735): pid=13947 uid=0 auid=0 ses=257875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653701.066:4245736): pid=13946 uid=0 auid=0 ses=257874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653701.066:4245737): pid=13947 uid=0 auid=0 ses=257875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653701.157:4245738): pid=13947 uid=0 auid=0 ses=257875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653701.161:4245739): pid=13947 uid=0 auid=0 ses=257875 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653701.177:4245740): pid=13948 uid=0 auid=0 ses=257873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653701.178:4245741): pid=13948 uid=0 auid=0 ses=257873 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653701.403:4245742): pid=13949 uid=0 auid=1055 ses=257876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653701.405:4245743): pid=13949 uid=0 auid=1055 ses=257876 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653704.418:4245744): pid=13946 uid=0 auid=0 ses=257874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653704.420:4245745): pid=13946 uid=0 auid=0 ses=257874 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674653742.163:4245746): avc: denied { read } for pid=14145 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674653742.163:4245746): avc: denied { open } for pid=14145 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653742.163:4245746): arch=c000003e syscall=2 success=yes exit=18 a0=55cf70d10f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=14145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653742.163:4245746): proctitle="dovecot/auth"
type=AVC msg=audit(1674653742.163:4245747): avc: denied { getattr } for pid=14145 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653742.163:4245747): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd58679240 a2=7ffd58679240 a3=fffffc00 items=0 ppid=5547 pid=14145 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653742.163:4245747): proctitle="dovecot/auth"
type=AVC msg=audit(1674653742.718:4245748): avc: denied { name_connect } for pid=14145 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674653742.718:4245748): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd58679030 a2=10 a3=7ffd5867902c items=0 ppid=5547 pid=14145 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653742.718:4245748): proctitle="dovecot/auth"
type=AVC msg=audit(1674653742.755:4245749): avc: denied { write } for pid=14175 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674653742.755:4245749): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc9a6ffb60 a2=6e a3=63d1302e items=0 ppid=5547 pid=14175 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653742.755:4245749): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674653761.443:4245750): pid=14272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653761.443:4245751): pid=14272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653761.444:4245752): pid=14272 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257877 res=1
type=USER_START msg=audit(1674653761.463:4245753): pid=14272 uid=0 auid=1055 ses=257877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653761.465:4245754): pid=14272 uid=0 auid=1055 ses=257877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653761.772:4245755): pid=14272 uid=0 auid=1055 ses=257877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653761.776:4245756): pid=14272 uid=0 auid=1055 ses=257877 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653821.790:4245757): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653821.791:4245758): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653821.791:4245759): pid=14469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257878 res=1
type=USER_START msg=audit(1674653821.802:4245760): pid=14469 uid=0 auid=1055 ses=257878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653821.803:4245761): pid=14469 uid=0 auid=1055 ses=257878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653822.098:4245762): pid=14469 uid=0 auid=1055 ses=257878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653822.100:4245763): pid=14469 uid=0 auid=1055 ses=257878 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674653824.236:4245764): avc: denied { write } for pid=14486 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674653824.236:4245764): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd2d9b2540 a2=6e a3=63d13080 items=0 ppid=5547 pid=14486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653824.236:4245764): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674653826.105:4245765): avc: denied { read append } for pid=14492 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674653826.105:4245765): avc: denied { open } for pid=14492 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653826.105:4245765): arch=c000003e syscall=2 success=yes exit=8 a0=55f70a395a60 a1=402 a2=7ffd35192070 a3=7ffd35191ae0 items=0 ppid=5547 pid=14492 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653826.105:4245765): proctitle="dovecot/imap"
type=AVC msg=audit(1674653826.105:4245766): avc: denied { getattr } for pid=14492 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653826.105:4245766): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffd35191fd0 a2=7ffd35191fd0 a3=7ffd35191a20 items=0 ppid=5547 pid=14492 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653826.105:4245766): proctitle="dovecot/imap"
type=AVC msg=audit(1674653826.106:4245767): avc: denied { write } for pid=14492 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653826.106:4245767): arch=c000003e syscall=2 success=yes exit=10 a0=55f70a39a960 a1=2 a2=7ffd35191d70 a3=7ffd35191820 items=0 ppid=5547 pid=14492 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653826.106:4245767): proctitle="dovecot/imap"
type=AVC msg=audit(1674653826.106:4245768): avc: denied { lock } for pid=14492 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653826.106:4245768): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffd35191c70 a3=63d13082 items=0 ppid=5547 pid=14492 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653826.106:4245768): proctitle="dovecot/imap"
type=AVC msg=audit(1674653826.106:4245769): avc: denied { read } for pid=14492 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674653826.106:4245769): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55f70a3c3300 a2=90800 a3=0 items=0 ppid=5547 pid=14492 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653826.106:4245769): proctitle="dovecot/imap"
type=AVC msg=audit(1674653826.107:4245770): avc: denied { getattr } for pid=14492 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674653826.107:4245770): arch=c000003e syscall=4 success=yes exit=0 a0=55f70a385a60 a1=7ffd35192020 a2=7ffd35192020 a3=6f632e6f72676173 items=0 ppid=5547 pid=14492 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653826.107:4245770): proctitle="dovecot/imap"
type=AVC msg=audit(1674653827.660:4245771): avc: denied { write } for pid=14497 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674653827.660:4245771): arch=c000003e syscall=21 success=yes exit=0 a0=55964acb84c0 a1=2 a2=7b48 a3=7ffdfd426ce0 items=0 ppid=5547 pid=14497 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653827.660:4245771): proctitle="dovecot/imap"
type=AVC msg=audit(1674653840.110:4245772): avc: denied { name_connect } for pid=14145 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674653840.110:4245772): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd58679030 a2=10 a3=7ffd5867902c items=0 ppid=5547 pid=14145 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653840.110:4245772): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674653841.201:4245773): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674653841.201:4245773): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b9b00ace010 items=0 ppid=14544 pid=14549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653841.201:4245773): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3137382E322E313134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674653881.113:4245774): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653881.113:4245775): pid=14690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653881.114:4245776): pid=14690 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257879 res=1
type=USER_START msg=audit(1674653881.130:4245777): pid=14690 uid=0 auid=1055 ses=257879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653881.133:4245778): pid=14690 uid=0 auid=1055 ses=257879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653881.387:4245779): pid=14690 uid=0 auid=1055 ses=257879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653881.389:4245780): pid=14690 uid=0 auid=1055 ses=257879 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653941.405:4245781): pid=14882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674653941.405:4245782): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653941.406:4245783): pid=14882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674653941.406:4245784): pid=14883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674653941.408:4245785): pid=14883 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257880 res=1
type=LOGIN msg=audit(1674653941.408:4245786): pid=14882 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257881 res=1
type=USER_START msg=audit(1674653941.437:4245787): pid=14882 uid=0 auid=0 ses=257881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674653941.437:4245788): pid=14883 uid=0 auid=1055 ses=257880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653941.438:4245789): pid=14883 uid=0 auid=1055 ses=257880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674653941.438:4245790): pid=14882 uid=0 auid=0 ses=257881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653941.758:4245791): pid=14883 uid=0 auid=1055 ses=257880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653941.762:4245792): pid=14883 uid=0 auid=1055 ses=257880 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674653942.756:4245793): pid=14882 uid=0 auid=0 ses=257881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674653942.758:4245794): pid=14882 uid=0 auid=0 ses=257881 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674653942.956:4245795): pid=14907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653942.956:4245796): pid=14907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653942.956:4245797): pid=14907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674653943.716:4245798): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=14907 suid=74 rport=55666 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674653943.716:4245799): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=14907 suid=74 rport=55666 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674653944.628:4245800): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674653946.242:4245801): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674653946.516:4245802): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14907 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653946.516:4245803): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14907 suid=74 rport=55666 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653946.517:4245804): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653946.517:4245805): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674653946.517:4245806): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14894 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674653946.517:4245807): pid=14894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=AVC msg=audit(1674653954.662:4245808): avc: denied { write } for pid=14723 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674653954.662:4245808): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd0f527060 a2=6e a3=63d13102 items=0 ppid=5547 pid=14723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653954.662:4245808): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674653968.709:4245809): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674653968.709:4245809): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b201c835010 items=0 ppid=15001 pid=15006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653968.709:4245809): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3138352E3235352E323237002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=AVC msg=audit(1674653990.091:4245810): avc: denied { name_connect } for pid=14145 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674653990.091:4245810): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd58679030 a2=10 a3=7ffd5867902c items=0 ppid=5547 pid=14145 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674653990.091:4245810): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674654001.777:4245811): pid=15113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654001.777:4245812): pid=15112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654001.777:4245813): pid=15113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654001.777:4245814): pid=15112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654001.778:4245815): pid=15113 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257882 res=1
type=LOGIN msg=audit(1674654001.778:4245816): pid=15112 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257883 res=1
type=USER_ACCT msg=audit(1674654001.781:4245817): pid=15114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654001.781:4245818): pid=15114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654001.782:4245819): pid=15114 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257884 res=1
type=USER_START msg=audit(1674654001.864:4245820): pid=15113 uid=0 auid=0 ses=257882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674654001.865:4245821): pid=15112 uid=0 auid=0 ses=257883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674654001.866:4245822): pid=15114 uid=0 auid=1055 ses=257884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654001.867:4245823): pid=15112 uid=0 auid=0 ses=257883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654001.867:4245824): pid=15113 uid=0 auid=0 ses=257882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654001.881:4245825): pid=15114 uid=0 auid=1055 ses=257884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654001.963:4245826): pid=15112 uid=0 auid=0 ses=257883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654001.966:4245827): pid=15112 uid=0 auid=0 ses=257883 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654002.268:4245828): pid=15114 uid=0 auid=1055 ses=257884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654002.271:4245829): pid=15114 uid=0 auid=1055 ses=257884 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654005.329:4245830): pid=15113 uid=0 auid=0 ses=257882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654005.330:4245831): pid=15113 uid=0 auid=0 ses=257882 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674654040.707:4245832): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654040.707:4245833): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654040.707:4245834): pid=15263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15263 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654040.849:4245835): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15263 suid=74 rport=53348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654040.850:4245836): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15263 suid=74 rport=53348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=? res=success'
type=USER_AUTH msg=audit(1674654041.556:4245837): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=137.74.36.230 addr=137.74.36.230 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654043.487:4245838): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674654043.639:4245839): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15263 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654043.639:4245840): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15263 suid=74 rport=53348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654043.640:4245841): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654043.640:4245842): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654043.640:4245843): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15262 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674654043.640:4245844): pid=15262 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674654057.396:4245845): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654057.397:4245846): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654057.397:4245847): pid=15337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15337 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654057.630:4245848): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=15337 suid=74 rport=61032 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.31.59.200 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654057.631:4245849): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=15337 suid=74 rport=61032 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.31.59.200 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654058.696:4245850): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15337 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654058.696:4245851): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15337 suid=74 rport=61032 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.31.59.200 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654058.697:4245852): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654058.697:4245853): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654058.697:4245854): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15336 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674654058.697:4245855): pid=15336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.31.59.200 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674654061.351:4245856): pid=15348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654061.351:4245857): pid=15348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654061.353:4245858): pid=15348 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257885 res=1
type=USER_START msg=audit(1674654061.373:4245859): pid=15348 uid=0 auid=1055 ses=257885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654061.374:4245860): pid=15348 uid=0 auid=1055 ses=257885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654061.712:4245861): pid=15348 uid=0 auid=1055 ses=257885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654061.715:4245862): pid=15348 uid=0 auid=1055 ses=257885 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674654070.471:4245863): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654070.471:4245864): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654070.471:4245865): pid=15385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15385 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654070.691:4245866): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=15385 suid=74 rport=48094 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.33.53.209 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654070.691:4245867): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=15385 suid=74 rport=48094 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.33.53.209 terminal=? res=success'
type=USER_AUTH msg=audit(1674654072.122:4245868): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.53.209 addr=114.33.53.209 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654074.309:4245869): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.53.209 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654075.014:4245870): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.53.209 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654075.625:4245871): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.53.209 addr=114.33.53.209 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654077.225:4245872): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.53.209 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654077.821:4245873): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.53.209 addr=114.33.53.209 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654080.027:4245874): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.53.209 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654080.484:4245875): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.53.209 addr=114.33.53.209 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674654082.048:4245876): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674654082.048:4245876): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc236240010 items=0 ppid=15421 pid=15424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.048:4245876): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674654082.054:4245877): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674654082.054:4245877): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd961373010 items=0 ppid=15421 pid=15425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.054:4245877): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674654082.059:4245878): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674654082.059:4245878): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f413f8b6010 items=0 ppid=15421 pid=15426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.059:4245878): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674654082.063:4245879): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674654082.063:4245879): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f67ad5c3010 items=0 ppid=15421 pid=15427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.063:4245879): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674654082.402:4245880): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674654082.402:4245880): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4e6a683010 items=0 ppid=15421 pid=15435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.402:4245880): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003134332E3139382E3134332E323333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674654082.410:4245881): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674654082.410:4245881): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9db165d010 items=0 ppid=15421 pid=15436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.410:4245881): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003134332E3139382E3134332E323333002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674654082.419:4245882): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674654082.419:4245882): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f56af4cd010 items=0 ppid=15421 pid=15437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.419:4245882): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003131342E33332E35332E323039002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674654082.427:4245883): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674654082.427:4245883): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f75c0a9c010 items=0 ppid=15421 pid=15438 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.427:4245883): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003131342E33332E35332E323039002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674654082.435:4245884): pid=15382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.53.209 terminal=ssh res=failed'
type=AVC msg=audit(1674654082.950:4245885): avc: denied { read } for pid=15467 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674654082.950:4245885): avc: denied { open } for pid=15467 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654082.950:4245885): arch=c000003e syscall=2 success=yes exit=18 a0=561bb1fa2f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=15467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.950:4245885): proctitle="dovecot/auth"
type=AVC msg=audit(1674654082.950:4245886): avc: denied { getattr } for pid=15467 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654082.950:4245886): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffee359f6b0 a2=7ffee359f6b0 a3=fffffc00 items=0 ppid=5547 pid=15467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654082.950:4245886): proctitle="dovecot/auth"
type=AVC msg=audit(1674654083.472:4245887): avc: denied { name_connect } for pid=15467 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674654083.472:4245887): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffee359f4a0 a2=10 a3=7ffee359f49c items=0 ppid=5547 pid=15467 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654083.472:4245887): proctitle="dovecot/auth"
type=AVC msg=audit(1674654083.500:4245888): avc: denied { write } for pid=15497 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674654083.500:4245888): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdd85af770 a2=6e a3=63d13183 items=0 ppid=5547 pid=15497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654083.500:4245888): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674654121.740:4245889): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654121.740:4245890): pid=15673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654121.741:4245891): pid=15673 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257886 res=1
type=USER_START msg=audit(1674654121.760:4245892): pid=15673 uid=0 auid=1055 ses=257886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654121.762:4245893): pid=15673 uid=0 auid=1055 ses=257886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654122.075:4245894): pid=15673 uid=0 auid=1055 ses=257886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654122.078:4245895): pid=15673 uid=0 auid=1055 ses=257886 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674654146.959:4245896): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654146.959:4245897): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654146.959:4245898): pid=15764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654147.195:4245899): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15764 suid=74 rport=42366 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654147.195:4245900): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15764 suid=74 rport=42366 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=? res=success'
type=USER_AUTH msg=audit(1674654148.286:4245901): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=192.95.7.146 addr=192.95.7.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654149.905:4245902): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674654150.147:4245903): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15764 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654150.147:4245904): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15764 suid=74 rport=42366 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654150.148:4245905): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654150.148:4245906): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654150.148:4245907): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674654150.148:4245908): pid=15763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=ssh res=failed'
type=AVC msg=audit(1674654177.572:4245909): avc: denied { name_connect } for pid=15467 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674654177.572:4245909): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffee359f4a0 a2=10 a3=7ffee359f49c items=0 ppid=5547 pid=15467 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654177.572:4245909): proctitle="dovecot/auth"
type=AVC msg=audit(1674654177.606:4245910): avc: denied { write } for pid=15851 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674654177.606:4245910): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd38b55240 a2=6e a3=63d131e1 items=0 ppid=5547 pid=15851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654177.606:4245910): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674654181.096:4245911): pid=15862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654181.096:4245912): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654181.097:4245913): pid=15862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654181.097:4245914): pid=15863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654181.098:4245915): pid=15862 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257887 res=1
type=LOGIN msg=audit(1674654181.098:4245916): pid=15863 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257888 res=1
type=USER_START msg=audit(1674654181.136:4245917): pid=15863 uid=0 auid=1055 ses=257888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674654181.136:4245918): pid=15862 uid=0 auid=0 ses=257887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654181.138:4245919): pid=15863 uid=0 auid=1055 ses=257888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654181.139:4245920): pid=15862 uid=0 auid=0 ses=257887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654181.198:4245921): pid=15862 uid=0 auid=0 ses=257887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654181.201:4245922): pid=15862 uid=0 auid=0 ses=257887 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654181.381:4245923): pid=15863 uid=0 auid=1055 ses=257888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654181.382:4245924): pid=15863 uid=0 auid=1055 ses=257888 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674654192.791:4245925): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654192.792:4245926): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654192.792:4245927): pid=15908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654193.083:4245928): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=15908 suid=74 rport=60632 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=189.254.255.3 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654193.083:4245929): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=15908 suid=74 rport=60632 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=189.254.255.3 terminal=? res=success'
type=USER_AUTH msg=audit(1674654194.357:4245930): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=189.254.255.3 addr=189.254.255.3 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654196.292:4245931): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=189.254.255.3 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674654196.581:4245932): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15908 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654196.581:4245933): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15908 suid=74 rport=60632 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=189.254.255.3 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654196.583:4245934): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654196.583:4245935): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654196.583:4245936): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674654196.583:4245937): pid=15907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=189.254.255.3 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674654241.398:4245938): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654241.398:4245939): pid=16064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654241.398:4245940): pid=16064 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257889 res=1
type=USER_START msg=audit(1674654241.415:4245941): pid=16064 uid=0 auid=1055 ses=257889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654241.417:4245942): pid=16064 uid=0 auid=1055 ses=257889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654241.662:4245943): pid=16064 uid=0 auid=1055 ses=257889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654241.663:4245944): pid=16064 uid=0 auid=1055 ses=257889 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654301.678:4245945): pid=16375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654301.678:4245946): pid=16375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654301.678:4245947): pid=16374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654301.678:4245948): pid=16375 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257890 res=1
type=CRED_ACQ msg=audit(1674654301.678:4245949): pid=16374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654301.678:4245950): pid=16374 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257891 res=1
type=USER_START msg=audit(1674654301.779:4245951): pid=16374 uid=0 auid=0 ses=257891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674654301.780:4245952): pid=16375 uid=0 auid=1055 ses=257890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654301.782:4245953): pid=16374 uid=0 auid=0 ses=257891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654301.785:4245954): pid=16375 uid=0 auid=1055 ses=257890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654302.254:4245955): pid=16375 uid=0 auid=1055 ses=257890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654302.282:4245956): pid=16375 uid=0 auid=1055 ses=257890 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654305.350:4245957): pid=16374 uid=0 auid=0 ses=257891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654305.352:4245958): pid=16374 uid=0 auid=0 ses=257891 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674654306.335:4245959): pid=16410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654306.336:4245960): pid=16410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654306.336:4245961): pid=16410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654306.490:4245962): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=16410 suid=74 rport=45632 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654306.490:4245963): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=16410 suid=74 rport=45632 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=? res=success'
type=USER_AUTH msg=audit(1674654307.232:4245964): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=137.74.36.230 addr=137.74.36.230 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654309.349:4245965): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674654309.502:4245966): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16410 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654309.502:4245967): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16410 suid=74 rport=45632 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654309.503:4245968): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654309.503:4245969): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654309.503:4245970): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674654309.503:4245971): pid=16409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.74.36.230 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674654312.186:4245972): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674654312.186:4245972): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f109e30e010 items=0 ppid=16437 pid=16440 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654312.186:4245972): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674654312.190:4245973): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674654312.190:4245973): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f60a1741010 items=0 ppid=16437 pid=16441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654312.190:4245973): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674654312.194:4245974): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674654312.194:4245974): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1b3c6b5010 items=0 ppid=16437 pid=16442 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654312.194:4245974): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674654312.198:4245975): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674654312.198:4245975): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f52f0f39010 items=0 ppid=16437 pid=16443 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654312.198:4245975): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674654312.498:4245976): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674654312.498:4245976): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7eff91bde010 items=0 ppid=16437 pid=16453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654312.498:4245976): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730034332E3133342E34352E3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674654312.503:4245977): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674654312.503:4245977): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f616aab9010 items=0 ppid=16437 pid=16454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654312.503:4245977): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640034332E3133342E34352E3234002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674654312.510:4245978): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674654312.510:4245978): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f436d5aa010 items=0 ppid=16437 pid=16455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654312.510:4245978): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003133372E37342E33362E323330002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674654312.517:4245979): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674654312.517:4245979): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fca5d9ce010 items=0 ppid=16437 pid=16456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654312.517:4245979): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003133372E37342E33362E323330002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674654316.047:4245980): pid=16476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654316.047:4245981): pid=16476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654316.047:4245982): pid=16476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16476 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654316.274:4245983): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=16476 suid=74 rport=41364 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.163.166 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654316.274:4245984): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=16476 suid=74 rport=41364 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.163.166 terminal=? res=success'
type=USER_AUTH msg=audit(1674654317.318:4245985): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.126.163.166 addr=59.126.163.166 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654319.139:4245986): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.163.166 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674654319.677:4245987): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16476 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654319.677:4245988): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16476 suid=74 rport=41364 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.163.166 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654319.678:4245989): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654319.678:4245990): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654319.678:4245991): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16475 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674654319.678:4245992): pid=16475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.163.166 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674654361.376:4245993): pid=16729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654361.376:4245994): pid=16729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654361.378:4245995): pid=16729 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257892 res=1
type=USER_START msg=audit(1674654361.399:4245996): pid=16729 uid=0 auid=1055 ses=257892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654361.401:4245997): pid=16729 uid=0 auid=1055 ses=257892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654361.790:4245998): pid=16729 uid=0 auid=1055 ses=257892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654361.794:4245999): pid=16729 uid=0 auid=1055 ses=257892 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674654370.778:4246000): pid=16774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654370.779:4246001): pid=16774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654370.779:4246002): pid=16774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654371.015:4246003): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=16774 suid=74 rport=53838 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654371.015:4246004): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=16774 suid=74 rport=53838 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=? res=success'
type=USER_AUTH msg=audit(1674654372.118:4246005): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=192.95.7.146 addr=192.95.7.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674654374.491:4246006): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674654374.732:4246007): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16774 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654374.732:4246008): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16774 suid=74 rport=53838 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654374.734:4246009): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654374.734:4246010): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654374.734:4246011): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674654374.734:4246012): pid=16773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.95.7.146 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674654377.217:4246013): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674654377.217:4246013): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f206c232010 items=0 ppid=16808 pid=16811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654377.217:4246013): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674654377.221:4246014): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674654377.221:4246014): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff698e2f010 items=0 ppid=16808 pid=16812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654377.221:4246014): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674654377.225:4246015): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674654377.225:4246015): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f49b7cdb010 items=0 ppid=16808 pid=16813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654377.225:4246015): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674654377.228:4246016): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674654377.228:4246016): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f392d52e010 items=0 ppid=16808 pid=16814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654377.228:4246016): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674654377.533:4246017): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674654377.533:4246017): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fee4b3cc010 items=0 ppid=16808 pid=16822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654377.533:4246017): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132382E3139392E31372E3537002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674654377.541:4246018): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674654377.541:4246018): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f78d377e010 items=0 ppid=16808 pid=16823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654377.541:4246018): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132382E3139392E31372E3537002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674654377.547:4246019): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674654377.547:4246019): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff58ae53010 items=0 ppid=16808 pid=16824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654377.547:4246019): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003139322E39352E372E313436002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674654377.554:4246020): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674654377.554:4246020): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f771d7d5010 items=0 ppid=16808 pid=16825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654377.554:4246020): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003139322E39352E372E313436002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674654421.818:4246021): pid=17001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654421.818:4246022): pid=17001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654421.820:4246023): pid=17001 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257893 res=1
type=USER_START msg=audit(1674654421.843:4246024): pid=17001 uid=0 auid=1055 ses=257893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654421.854:4246025): pid=17001 uid=0 auid=1055 ses=257893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654422.217:4246026): pid=17001 uid=0 auid=1055 ses=257893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654422.219:4246027): pid=17001 uid=0 auid=1055 ses=257893 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674654464.656:4246028): avc: denied { read } for pid=17184 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674654464.656:4246028): avc: denied { open } for pid=17184 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.656:4246028): arch=c000003e syscall=2 success=yes exit=18 a0=560c33f66f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.656:4246028): proctitle="dovecot/auth"
type=AVC msg=audit(1674654464.656:4246029): avc: denied { getattr } for pid=17184 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.656:4246029): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe86bf4b90 a2=7ffe86bf4b90 a3=fffffc00 items=0 ppid=5547 pid=17184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.656:4246029): proctitle="dovecot/auth"
type=AVC msg=audit(1674654464.675:4246030): avc: denied { write } for pid=17185 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674654464.675:4246030): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc60322f80 a2=6e a3=63d13300 items=0 ppid=5547 pid=17185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.675:4246030): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674654464.690:4246031): avc: denied { read append } for pid=17183 comm="lmtp" name="maildirsize" dev="vda1" ino=320594718 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674654464.690:4246031): avc: denied { open } for pid=17183 comm="lmtp" path="/home/wwwresourcehunte/mail/maildirsize" dev="vda1" ino=320594718 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.690:4246031): arch=c000003e syscall=2 success=yes exit=17 a0=5615fec44a50 a1=402 a2=7ffc688d0ee0 a3=fffff800 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.690:4246031): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.693:4246032): avc: denied { getattr } for pid=17183 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.log" dev="vda1" ino=320594709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.693:4246032): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffc688d1d60 a2=7ffc688d1d60 a3=7ffc688d17e0 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.693:4246032): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.693:4246033): avc: denied { write } for pid=17183 comm="lmtp" name="dovecot.index" dev="vda1" ino=320594715 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.693:4246033): arch=c000003e syscall=2 success=yes exit=18 a0=5615fec82c20 a1=2 a2=7ffc688d1b00 a3=7ffc688d15a0 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.693:4246033): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.694:4246034): avc: denied { read write } for pid=17183 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674654464.694:4246034): avc: denied { open } for pid=17183 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.694:4246034): arch=c000003e syscall=2 success=yes exit=19 a0=5615fec781e0 a1=2 a2=7ffc688d1d80 a3=7ffc688d1a20 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.694:4246034): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.694:4246035): avc: denied { getattr } for pid=17183 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.694:4246035): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffc688d1ee0 a2=7ffc688d1ee0 a3=7ffc688d18e0 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.694:4246035): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.699:4246036): avc: denied { write } for pid=17183 comm="lmtp" name="tmp" dev="vda1" ino=58914102 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674654464.699:4246036): avc: denied { add_name } for pid=17183 comm="lmtp" name="1674654464.M693138P17183.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674654464.699:4246036): avc: denied { create } for pid=17183 comm="lmtp" name="1674654464.M693138P17183.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.699:4246036): arch=c000003e syscall=2 success=yes exit=21 a0=5615febda200 a1=2c1 a2=1ff a3=7ffc688d19a0 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.699:4246036): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.704:4246037): avc: denied { lock } for pid=17183 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.log" dev="vda1" ino=320594709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.704:4246037): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffc688d1990 a3=63d13300 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.704:4246037): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.705:4246038): avc: denied { remove_name } for pid=17183 comm="lmtp" name="1674654464.M693138P17183.host.nexidigital.com" dev="vda1" ino=62201772 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674654464.705:4246038): avc: denied { rename } for pid=17183 comm="lmtp" name="1674654464.M693138P17183.host.nexidigital.com" dev="vda1" ino=62201772 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.705:4246038): arch=c000003e syscall=82 success=yes exit=0 a0=5615febd95b0 a1=5615febd9600 a2=69d8 a3=7ffc688d1920 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.705:4246038): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.706:4246039): avc: denied { read } for pid=17183 comm="lmtp" name="new" dev="vda1" ino=58914101 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674654464.706:4246039): arch=c000003e syscall=2 success=yes exit=21 a0=5615fec97420 a1=0 a2=0 a3=7ffc688d1920 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.706:4246039): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.711:4246040): avc: denied { lock } for pid=17183 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.cache" dev="vda1" ino=320202326 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.711:4246040): arch=c000003e syscall=72 success=yes exit=0 a0=16 a1=7 a2=7ffc688d1cb0 a3=63d13300 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.711:4246040): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.711:4246041): avc: denied { unlink } for pid=17183 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=320614365 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.711:4246041): arch=c000003e syscall=87 success=yes exit=0 a0=5615fec9cd50 a1=7f73db66a071 a2=2f9 a3=4 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.711:4246041): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.711:4246042): avc: denied { append } for pid=17183 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=320200839 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.711:4246042): arch=c000003e syscall=2 success=yes exit=21 a0=5615fec96cb0 a1=402 a2=7ffc688d1e10 a3=4 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.711:4246042): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.713:4246043): avc: denied { link } for pid=17183 comm="lmtp" name=".temp.host.nexidigital.com.17183.b4a306ccd84936d7" dev="vda1" ino=320614365 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.713:4246043): arch=c000003e syscall=86 success=yes exit=0 a0=5615febda8d8 a1=5615febda848 a2=1 a3=63d13300 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.713:4246043): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654464.713:4246044): avc: denied { setattr } for pid=17183 comm="lmtp" name=".temp.host.nexidigital.com.17183.b4a306ccd84936d7" dev="vda1" ino=320614365 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654464.713:4246044): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=426 a3=36 items=0 ppid=5547 pid=17183 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654464.713:4246044): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674654465.466:4246045): avc: denied { name_connect } for pid=17184 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674654465.466:4246045): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffe86bf4980 a2=10 a3=7ffe86bf497c items=0 ppid=5547 pid=17184 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654465.466:4246045): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674654481.236:4246046): pid=17327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654481.236:4246047): pid=17327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654481.237:4246048): pid=17327 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257894 res=1
type=USER_START msg=audit(1674654481.255:4246049): pid=17327 uid=0 auid=1055 ses=257894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654481.258:4246050): pid=17327 uid=0 auid=1055 ses=257894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654481.499:4246051): pid=17327 uid=0 auid=1055 ses=257894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654481.500:4246052): pid=17327 uid=0 auid=1055 ses=257894 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654541.515:4246053): pid=17555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654541.515:4246054): pid=17555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654541.516:4246055): pid=17555 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257895 res=1
type=USER_START msg=audit(1674654541.531:4246056): pid=17555 uid=0 auid=1055 ses=257895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654541.532:4246057): pid=17555 uid=0 auid=1055 ses=257895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654541.785:4246058): pid=17555 uid=0 auid=1055 ses=257895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654541.787:4246059): pid=17555 uid=0 auid=1055 ses=257895 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654601.811:4246060): pid=17741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654601.811:4246061): pid=17741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654601.812:4246062): pid=17743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654601.812:4246063): pid=17741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257896 res=1
type=CRED_ACQ msg=audit(1674654601.812:4246064): pid=17743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654601.812:4246065): pid=17743 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257897 res=1
type=USER_ACCT msg=audit(1674654601.820:4246066): pid=17742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654601.820:4246067): pid=17742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654601.820:4246068): pid=17742 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257898 res=1
type=USER_ACCT msg=audit(1674654601.822:4246069): pid=17740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654601.822:4246070): pid=17740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654601.822:4246071): pid=17740 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257899 res=1
type=USER_START msg=audit(1674654601.947:4246072): pid=17743 uid=0 auid=1055 ses=257897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674654601.948:4246073): pid=17741 uid=0 auid=0 ses=257896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674654601.948:4246074): pid=17742 uid=0 auid=0 ses=257898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674654601.948:4246075): pid=17740 uid=0 auid=0 ses=257899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654601.953:4246076): pid=17741 uid=0 auid=0 ses=257896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654601.953:4246077): pid=17743 uid=0 auid=1055 ses=257897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654601.953:4246078): pid=17742 uid=0 auid=0 ses=257898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654601.953:4246079): pid=17740 uid=0 auid=0 ses=257899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654601.984:4246080): pid=17740 uid=0 auid=0 ses=257899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654601.987:4246081): pid=17740 uid=0 auid=0 ses=257899 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654602.058:4246082): pid=17742 uid=0 auid=0 ses=257898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654602.073:4246083): pid=17742 uid=0 auid=0 ses=257898 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654602.324:4246084): pid=17743 uid=0 auid=1055 ses=257897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654602.327:4246085): pid=17743 uid=0 auid=1055 ses=257897 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654605.389:4246086): pid=17741 uid=0 auid=0 ses=257896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654605.392:4246087): pid=17741 uid=0 auid=0 ses=257896 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674654624.506:4246088): avc: denied { read } for pid=17824 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674654624.506:4246088): avc: denied { open } for pid=17824 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654624.506:4246088): arch=c000003e syscall=2 success=yes exit=18 a0=562cc9f04f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654624.506:4246088): proctitle="dovecot/auth"
type=AVC msg=audit(1674654624.506:4246089): avc: denied { getattr } for pid=17824 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654624.506:4246089): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffeba9b56d0 a2=7ffeba9b56d0 a3=fffffc00 items=0 ppid=5547 pid=17824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654624.506:4246089): proctitle="dovecot/auth"
type=AVC msg=audit(1674654625.234:4246090): avc: denied { name_connect } for pid=17824 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674654625.234:4246090): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffeba9b54c0 a2=10 a3=7ffeba9b54bc items=0 ppid=5547 pid=17824 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654625.234:4246090): proctitle="dovecot/auth"
type=AVC msg=audit(1674654625.262:4246091): avc: denied { write } for pid=17829 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674654625.262:4246091): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcb48cc6d0 a2=6e a3=63d133a1 items=0 ppid=5547 pid=17829 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654625.262:4246091): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674654625.813:4246092): avc: denied { read append } for pid=17831 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674654625.813:4246092): avc: denied { open } for pid=17831 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654625.813:4246092): arch=c000003e syscall=2 success=yes exit=8 a0=55b9146cda60 a1=402 a2=7ffecb0d4110 a3=7ffecb0d3ba0 items=0 ppid=5547 pid=17831 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654625.813:4246092): proctitle="dovecot/imap"
type=AVC msg=audit(1674654625.814:4246093): avc: denied { getattr } for pid=17831 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654625.814:4246093): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffecb0d4070 a2=7ffecb0d4070 a3=7ffecb0d3ae0 items=0 ppid=5547 pid=17831 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654625.814:4246093): proctitle="dovecot/imap"
type=AVC msg=audit(1674654625.814:4246094): avc: denied { write } for pid=17831 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654625.814:4246094): arch=c000003e syscall=2 success=yes exit=10 a0=55b9146d2990 a1=2 a2=7ffecb0d3e10 a3=7ffecb0d38a0 items=0 ppid=5547 pid=17831 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654625.814:4246094): proctitle="dovecot/imap"
type=AVC msg=audit(1674654625.814:4246095): avc: denied { lock } for pid=17831 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654625.814:4246095): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffecb0d3d10 a3=63d133a1 items=0 ppid=5547 pid=17831 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654625.814:4246095): proctitle="dovecot/imap"
type=AVC msg=audit(1674654625.814:4246096): avc: denied { read } for pid=17831 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674654625.814:4246096): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55b9146fb300 a2=90800 a3=0 items=0 ppid=5547 pid=17831 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654625.814:4246096): proctitle="dovecot/imap"
type=AVC msg=audit(1674654625.815:4246097): avc: denied { getattr } for pid=17831 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674654625.815:4246097): arch=c000003e syscall=4 success=yes exit=0 a0=55b9146bda60 a1=7ffecb0d40c0 a2=7ffecb0d40c0 a3=6f632e6f72676173 items=0 ppid=5547 pid=17831 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654625.815:4246097): proctitle="dovecot/imap"
type=AVC msg=audit(1674654628.001:4246098): avc: denied { write } for pid=17859 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674654628.001:4246098): arch=c000003e syscall=21 success=yes exit=0 a0=55cf121fe4c0 a1=2 a2=7b48 a3=7fffe01a1820 items=0 ppid=5547 pid=17859 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654628.001:4246098): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674654661.416:4246099): pid=17955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654661.416:4246100): pid=17955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654661.418:4246101): pid=17955 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257900 res=1
type=USER_START msg=audit(1674654661.439:4246102): pid=17955 uid=0 auid=1055 ses=257900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654661.441:4246103): pid=17955 uid=0 auid=1055 ses=257900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654661.706:4246104): pid=17955 uid=0 auid=1055 ses=257900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654661.709:4246105): pid=17955 uid=0 auid=1055 ses=257900 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654721.725:4246106): pid=18150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654721.725:4246107): pid=18150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654721.725:4246108): pid=18150 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257901 res=1
type=USER_START msg=audit(1674654721.740:4246109): pid=18150 uid=0 auid=1055 ses=257901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654721.741:4246110): pid=18150 uid=0 auid=1055 ses=257901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654722.113:4246111): pid=18150 uid=0 auid=1055 ses=257901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654722.116:4246112): pid=18150 uid=0 auid=1055 ses=257901 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674654746.198:4246113): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674654746.198:4246113): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b86194d6010 items=0 ppid=18262 pid=18267 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654746.198:4246113): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138302E3136392E32352E313134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674654755.940:4246114): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674654755.940:4246114): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b471bc5f010 items=0 ppid=18297 pid=18302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654755.940:4246114): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E39322E3132372E323533002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674654768.224:4246115): avc: denied { name_connect } for pid=17824 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674654768.224:4246115): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffeba9b54c0 a2=10 a3=7ffeba9b54bc items=0 ppid=5547 pid=17824 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654768.224:4246115): proctitle="dovecot/auth"
type=AVC msg=audit(1674654768.257:4246116): avc: denied { write } for pid=18395 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674654768.257:4246116): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffe0bead50 a2=6e a3=63d13430 items=0 ppid=5547 pid=18395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654768.257:4246116): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674654774.298:4246117): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674654774.298:4246117): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b0873899010 items=0 ppid=18462 pid=18467 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654774.298:4246117): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E32332E3130362E3833002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674654781.133:4246118): pid=18486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654781.133:4246119): pid=18486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654781.134:4246120): pid=18486 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257902 res=1
type=USER_START msg=audit(1674654781.149:4246121): pid=18486 uid=0 auid=1055 ses=257902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654781.151:4246122): pid=18486 uid=0 auid=1055 ses=257902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654781.437:4246123): pid=18486 uid=0 auid=1055 ses=257902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654781.439:4246124): pid=18486 uid=0 auid=1055 ses=257902 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674654815.077:4246125): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674654815.077:4246125): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b8f6e5b6010 items=0 ppid=18615 pid=18621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654815.077:4246125): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003136322E3234302E35312E3635002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674654841.458:4246126): pid=18690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654841.458:4246127): pid=18690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654841.458:4246128): pid=18690 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257903 res=1
type=USER_START msg=audit(1674654841.478:4246129): pid=18690 uid=0 auid=1055 ses=257903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654841.480:4246130): pid=18690 uid=0 auid=1055 ses=257903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654841.802:4246131): pid=18690 uid=0 auid=1055 ses=257903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654841.803:4246132): pid=18690 uid=0 auid=1055 ses=257903 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674654880.857:4246133): pid=18840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654880.858:4246134): pid=18840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654880.858:4246135): pid=18840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18840 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654881.268:4246136): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=18840 suid=74 rport=57376 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.96.211.178 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674654881.268:4246137): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=18840 suid=74 rport=57376 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.96.211.178 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654882.080:4246138): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18840 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654882.080:4246139): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654882.080:4246140): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674654882.080:4246141): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674654882.081:4246142): pid=18836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.96.211.178 terminal=ssh res=failed'
type=AVC msg=audit(1674654901.080:4246143): avc: denied { name_connect } for pid=17824 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674654901.080:4246143): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffeba9b54c0 a2=10 a3=7ffeba9b54bc items=0 ppid=5547 pid=17824 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654901.080:4246143): proctitle="dovecot/auth"
type=AVC msg=audit(1674654901.128:4246144): avc: denied { write } for pid=18899 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674654901.128:4246144): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff47b33f80 a2=6e a3=63d134b5 items=0 ppid=5547 pid=18899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654901.128:4246144): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674654901.822:4246145): pid=18904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654901.822:4246146): pid=18904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654901.822:4246147): pid=18904 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257904 res=1
type=USER_ACCT msg=audit(1674654901.840:4246148): pid=18905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654901.846:4246149): pid=18905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654901.854:4246150): pid=18905 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257905 res=1
type=USER_START msg=audit(1674654901.876:4246151): pid=18904 uid=0 auid=0 ses=257904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674654901.891:4246152): pid=18905 uid=0 auid=1055 ses=257905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654901.892:4246153): pid=18905 uid=0 auid=1055 ses=257905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654901.894:4246154): pid=18904 uid=0 auid=0 ses=257904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654902.290:4246155): pid=18905 uid=0 auid=1055 ses=257905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654902.301:4246156): pid=18905 uid=0 auid=1055 ses=257905 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654905.349:4246157): pid=18904 uid=0 auid=0 ses=257904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654905.350:4246158): pid=18904 uid=0 auid=0 ses=257904 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674654961.368:4246159): pid=19099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674654961.368:4246160): pid=19099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674654961.371:4246161): pid=19099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257906 res=1
type=USER_START msg=audit(1674654961.387:4246162): pid=19099 uid=0 auid=1055 ses=257906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674654961.388:4246163): pid=19099 uid=0 auid=1055 ses=257906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674654961.663:4246164): pid=19099 uid=0 auid=1055 ses=257906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674654961.665:4246165): pid=19099 uid=0 auid=1055 ses=257906 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674654962.376:4246166): avc: denied { write } for pid=18899 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674654962.376:4246166): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff47b33f80 a2=6e a3=63d134f2 items=0 ppid=5547 pid=18899 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674654962.376:4246166): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674655021.679:4246167): pid=19293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655021.679:4246168): pid=19293 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655021.679:4246169): pid=19293 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257907 res=1
type=USER_START msg=audit(1674655021.690:4246170): pid=19293 uid=0 auid=1055 ses=257907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655021.691:4246171): pid=19293 uid=0 auid=1055 ses=257907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655021.956:4246172): pid=19293 uid=0 auid=1055 ses=257907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655021.958:4246173): pid=19293 uid=0 auid=1055 ses=257907 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655081.970:4246174): pid=19479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655081.970:4246175): pid=19480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655081.970:4246176): pid=19479 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655081.971:4246177): pid=19480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655081.971:4246178): pid=19479 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257908 res=1
type=LOGIN msg=audit(1674655081.971:4246179): pid=19480 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257909 res=1
type=USER_START msg=audit(1674655081.998:4246180): pid=19479 uid=0 auid=0 ses=257908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655081.998:4246181): pid=19480 uid=0 auid=1055 ses=257909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655081.999:4246182): pid=19479 uid=0 auid=0 ses=257908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655082.000:4246183): pid=19480 uid=0 auid=1055 ses=257909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655082.044:4246184): pid=19479 uid=0 auid=0 ses=257908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655082.045:4246185): pid=19479 uid=0 auid=0 ses=257908 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655082.240:4246186): pid=19480 uid=0 auid=1055 ses=257909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655082.241:4246187): pid=19480 uid=0 auid=1055 ses=257909 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655141.256:4246188): pid=19691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655141.256:4246189): pid=19691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655141.257:4246190): pid=19691 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257910 res=1
type=USER_START msg=audit(1674655141.267:4246191): pid=19691 uid=0 auid=1055 ses=257910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655141.268:4246192): pid=19691 uid=0 auid=1055 ses=257910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655141.528:4246193): pid=19691 uid=0 auid=1055 ses=257910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655141.530:4246194): pid=19691 uid=0 auid=1055 ses=257910 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674655143.871:4246195): avc: denied { read } for pid=19728 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674655143.871:4246195): avc: denied { open } for pid=19728 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655143.871:4246195): arch=c000003e syscall=2 success=yes exit=18 a0=55eb2fd25f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=19728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655143.871:4246195): proctitle="dovecot/auth"
type=AVC msg=audit(1674655143.872:4246196): avc: denied { getattr } for pid=19728 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655143.872:4246196): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd5f11d1b0 a2=7ffd5f11d1b0 a3=fffffc00 items=0 ppid=5547 pid=19728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655143.872:4246196): proctitle="dovecot/auth"
type=AVC msg=audit(1674655144.452:4246197): avc: denied { name_connect } for pid=19728 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674655144.452:4246197): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd5f11cfa0 a2=10 a3=7ffd5f11cf9c items=0 ppid=5547 pid=19728 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655144.452:4246197): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674655201.549:4246198): pid=20008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655201.549:4246199): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655201.549:4246200): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655201.549:4246201): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655201.549:4246202): pid=20008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655201.549:4246203): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655201.549:4246204): pid=20005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655201.550:4246205): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655201.550:4246206): pid=20008 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257911 res=1
type=LOGIN msg=audit(1674655201.550:4246207): pid=20007 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257913 res=1
type=LOGIN msg=audit(1674655201.550:4246208): pid=20005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257912 res=1
type=LOGIN msg=audit(1674655201.550:4246209): pid=20006 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257914 res=1
type=USER_START msg=audit(1674655201.635:4246210): pid=20006 uid=0 auid=0 ses=257914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655201.635:4246211): pid=20005 uid=0 auid=0 ses=257912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655201.635:4246212): pid=20008 uid=0 auid=1055 ses=257911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655201.635:4246213): pid=20005 uid=0 auid=0 ses=257912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655201.635:4246214): pid=20008 uid=0 auid=1055 ses=257911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655201.641:4246215): pid=20006 uid=0 auid=0 ses=257914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655201.641:4246216): pid=20007 uid=0 auid=0 ses=257913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655201.642:4246217): pid=20007 uid=0 auid=0 ses=257913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655201.673:4246218): pid=20005 uid=0 auid=0 ses=257912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655201.693:4246219): pid=20005 uid=0 auid=0 ses=257912 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655201.809:4246220): pid=20006 uid=0 auid=0 ses=257914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655201.813:4246221): pid=20006 uid=0 auid=0 ses=257914 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655202.078:4246222): pid=20008 uid=0 auid=1055 ses=257911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655202.081:4246223): pid=20008 uid=0 auid=1055 ses=257911 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655205.017:4246224): pid=20007 uid=0 auid=0 ses=257913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655205.020:4246225): pid=20007 uid=0 auid=0 ses=257913 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655261.042:4246226): pid=20238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655261.042:4246227): pid=20238 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655261.042:4246228): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655261.043:4246229): pid=20237 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655261.043:4246230): pid=20238 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257915 res=1
type=LOGIN msg=audit(1674655261.044:4246231): pid=20237 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257916 res=1
type=USER_START msg=audit(1674655261.071:4246232): pid=20237 uid=0 auid=0 ses=257916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655261.072:4246233): pid=20238 uid=0 auid=1055 ses=257915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655261.072:4246234): pid=20237 uid=0 auid=0 ses=257916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655261.073:4246235): pid=20238 uid=0 auid=1055 ses=257915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655261.099:4246236): pid=20237 uid=0 auid=0 ses=257916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655261.102:4246237): pid=20237 uid=0 auid=0 ses=257916 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655261.334:4246238): pid=20238 uid=0 auid=1055 ses=257915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655261.337:4246239): pid=20238 uid=0 auid=1055 ses=257915 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674655308.778:4246240): avc: denied { read } for pid=20426 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674655308.778:4246240): avc: denied { open } for pid=20426 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655308.778:4246240): arch=c000003e syscall=2 success=yes exit=18 a0=558b19b2ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655308.778:4246240): proctitle="dovecot/auth"
type=AVC msg=audit(1674655308.778:4246241): avc: denied { getattr } for pid=20426 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655308.778:4246241): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff4d9e9020 a2=7fff4d9e9020 a3=fffffc00 items=0 ppid=5547 pid=20426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655308.778:4246241): proctitle="dovecot/auth"
type=AVC msg=audit(1674655310.829:4246242): avc: denied { name_connect } for pid=20426 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674655310.829:4246242): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff4d9e8e10 a2=10 a3=7fff4d9e8e0c items=0 ppid=5547 pid=20426 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655310.829:4246242): proctitle="dovecot/auth"
type=AVC msg=audit(1674655310.858:4246243): avc: denied { write } for pid=20434 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674655310.858:4246243): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff37639240 a2=6e a3=63d1364e items=0 ppid=5547 pid=20434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655310.858:4246243): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674655321.356:4246244): pid=20469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655321.356:4246245): pid=20469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655321.356:4246246): pid=20469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257917 res=1
type=USER_START msg=audit(1674655321.376:4246247): pid=20469 uid=0 auid=1055 ses=257917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655321.378:4246248): pid=20469 uid=0 auid=1055 ses=257917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655321.692:4246249): pid=20469 uid=0 auid=1055 ses=257917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655321.694:4246250): pid=20469 uid=0 auid=1055 ses=257917 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655381.711:4246251): pid=20711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655381.719:4246252): pid=20711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655381.720:4246253): pid=20711 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257918 res=1
type=USER_START msg=audit(1674655381.736:4246254): pid=20711 uid=0 auid=1055 ses=257918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655381.738:4246255): pid=20711 uid=0 auid=1055 ses=257918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655382.182:4246256): pid=20711 uid=0 auid=1055 ses=257918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655382.186:4246257): pid=20711 uid=0 auid=1055 ses=257918 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655441.201:4246258): pid=20901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655441.202:4246259): pid=20901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655441.203:4246260): pid=20901 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257919 res=1
type=USER_START msg=audit(1674655441.226:4246261): pid=20901 uid=0 auid=1055 ses=257919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655441.228:4246262): pid=20901 uid=0 auid=1055 ses=257919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655441.596:4246263): pid=20901 uid=0 auid=1055 ses=257919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655441.598:4246264): pid=20901 uid=0 auid=1055 ses=257919 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674655445.951:4246265): avc: denied { read } for pid=20945 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674655445.951:4246265): avc: denied { open } for pid=20945 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655445.951:4246265): arch=c000003e syscall=2 success=yes exit=18 a0=562218879f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655445.951:4246265): proctitle="dovecot/auth"
type=AVC msg=audit(1674655445.951:4246266): avc: denied { getattr } for pid=20945 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655445.951:4246266): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff99e51fd0 a2=7fff99e51fd0 a3=fffffc00 items=0 ppid=5547 pid=20945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655445.951:4246266): proctitle="dovecot/auth"
type=AVC msg=audit(1674655496.171:4246267): avc: denied { write } for pid=20976 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674655496.171:4246267): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc13ab07a0 a2=6e a3=63d13708 items=0 ppid=5547 pid=20976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655496.171:4246267): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674655501.616:4246268): pid=21201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655501.616:4246270): pid=21200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655501.616:4246269): pid=21202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655501.616:4246271): pid=21201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655501.616:4246272): pid=21200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655501.616:4246273): pid=21202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655501.616:4246274): pid=21200 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257920 res=1
type=LOGIN msg=audit(1674655501.616:4246275): pid=21201 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257921 res=1
type=LOGIN msg=audit(1674655501.616:4246276): pid=21202 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257922 res=1
type=USER_START msg=audit(1674655501.665:4246277): pid=21201 uid=0 auid=0 ses=257921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655501.665:4246278): pid=21202 uid=0 auid=1055 ses=257922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655501.666:4246279): pid=21201 uid=0 auid=0 ses=257921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655501.667:4246280): pid=21202 uid=0 auid=1055 ses=257922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655501.668:4246281): pid=21200 uid=0 auid=0 ses=257920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655501.669:4246282): pid=21200 uid=0 auid=0 ses=257920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655501.781:4246283): pid=21201 uid=0 auid=0 ses=257921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655501.792:4246284): pid=21201 uid=0 auid=0 ses=257921 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655502.052:4246285): pid=21202 uid=0 auid=1055 ses=257922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655502.059:4246286): pid=21202 uid=0 auid=1055 ses=257922 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655505.044:4246287): pid=21200 uid=0 auid=0 ses=257920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655505.046:4246288): pid=21200 uid=0 auid=0 ses=257920 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674655514.291:4246289): avc: denied { name_connect } for pid=20945 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674655514.291:4246289): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff99e51dc0 a2=10 a3=7fff99e51dbc items=0 ppid=5547 pid=20945 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655514.291:4246289): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674655515.401:4246290): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674655515.401:4246290): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae46fe25010 items=0 ppid=21264 pid=21269 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655515.401:4246290): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131362E39352E33382E3236002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543134
type=USER_ACCT msg=audit(1674655561.062:4246291): pid=21430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655561.062:4246292): pid=21430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655561.063:4246293): pid=21430 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257923 res=1
type=USER_START msg=audit(1674655561.081:4246294): pid=21430 uid=0 auid=1055 ses=257923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655561.083:4246295): pid=21430 uid=0 auid=1055 ses=257923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655561.385:4246296): pid=21430 uid=0 auid=1055 ses=257923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655561.387:4246297): pid=21430 uid=0 auid=1055 ses=257923 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655621.403:4246298): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655621.403:4246299): pid=21630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655621.403:4246300): pid=21630 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257924 res=1
type=USER_START msg=audit(1674655621.419:4246301): pid=21630 uid=0 auid=1055 ses=257924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655621.421:4246302): pid=21630 uid=0 auid=1055 ses=257924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655621.717:4246303): pid=21630 uid=0 auid=1055 ses=257924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655621.719:4246304): pid=21630 uid=0 auid=1055 ses=257924 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655681.735:4246305): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655681.735:4246306): pid=21826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655681.736:4246307): pid=21826 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257925 res=1
type=USER_START msg=audit(1674655681.746:4246308): pid=21826 uid=0 auid=1055 ses=257925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655681.748:4246309): pid=21826 uid=0 auid=1055 ses=257925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655682.078:4246310): pid=21826 uid=0 auid=1055 ses=257925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655682.080:4246311): pid=21826 uid=0 auid=1055 ses=257925 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655741.093:4246312): pid=22006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655741.093:4246313): pid=22005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655741.093:4246314): pid=22005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655741.093:4246315): pid=22006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655741.093:4246316): pid=22005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257926 res=1
type=LOGIN msg=audit(1674655741.093:4246317): pid=22006 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257927 res=1
type=USER_START msg=audit(1674655741.124:4246318): pid=22006 uid=0 auid=1055 ses=257927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655741.125:4246319): pid=22005 uid=0 auid=0 ses=257926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655741.125:4246320): pid=22006 uid=0 auid=1055 ses=257927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655741.126:4246321): pid=22005 uid=0 auid=0 ses=257926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655741.456:4246322): pid=22006 uid=0 auid=1055 ses=257927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655741.462:4246323): pid=22006 uid=0 auid=1055 ses=257927 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655742.685:4246324): pid=22005 uid=0 auid=0 ses=257926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655742.688:4246325): pid=22005 uid=0 auid=0 ses=257926 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655801.703:4246327): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655801.703:4246326): pid=22226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655801.703:4246328): pid=22225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655801.708:4246329): pid=22224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655801.708:4246330): pid=22225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655801.708:4246331): pid=22226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655801.708:4246332): pid=22224 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257928 res=1
type=LOGIN msg=audit(1674655801.708:4246333): pid=22226 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257929 res=1
type=LOGIN msg=audit(1674655801.708:4246334): pid=22225 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257930 res=1
type=USER_START msg=audit(1674655801.794:4246335): pid=22226 uid=0 auid=1055 ses=257929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655801.794:4246336): pid=22225 uid=0 auid=0 ses=257930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655801.794:4246337): pid=22226 uid=0 auid=1055 ses=257929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655801.794:4246338): pid=22225 uid=0 auid=0 ses=257930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655801.826:4246339): pid=22224 uid=0 auid=0 ses=257928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655801.829:4246340): pid=22224 uid=0 auid=0 ses=257928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655801.861:4246341): pid=22224 uid=0 auid=0 ses=257928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655801.864:4246342): pid=22224 uid=0 auid=0 ses=257928 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655802.260:4246343): pid=22226 uid=0 auid=1055 ses=257929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655802.274:4246344): pid=22226 uid=0 auid=1055 ses=257929 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655805.242:4246345): pid=22225 uid=0 auid=0 ses=257930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655805.244:4246346): pid=22225 uid=0 auid=0 ses=257930 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674655823.891:4246347): avc: denied { read } for pid=22318 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674655823.891:4246347): avc: denied { open } for pid=22318 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655823.891:4246347): arch=c000003e syscall=2 success=yes exit=18 a0=55fca62e3f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655823.891:4246347): proctitle="dovecot/auth"
type=AVC msg=audit(1674655823.891:4246348): avc: denied { getattr } for pid=22318 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655823.891:4246348): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcd96af180 a2=7ffcd96af180 a3=fffffc00 items=0 ppid=5547 pid=22318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655823.891:4246348): proctitle="dovecot/auth"
type=AVC msg=audit(1674655826.284:4246349): avc: denied { name_connect } for pid=22318 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674655826.284:4246349): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcd96aef70 a2=10 a3=7ffcd96aef6c items=0 ppid=5547 pid=22318 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655826.284:4246349): proctitle="dovecot/auth"
type=AVC msg=audit(1674655826.310:4246350): avc: denied { write } for pid=22349 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674655826.310:4246350): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe2a712be0 a2=6e a3=63d13852 items=0 ppid=5547 pid=22349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655826.310:4246350): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674655827.075:4246351): avc: denied { read append } for pid=22360 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674655827.075:4246351): avc: denied { open } for pid=22360 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655827.075:4246351): arch=c000003e syscall=2 success=yes exit=8 a0=55c406f62a60 a1=402 a2=7ffed960c080 a3=7ffed960bb20 items=0 ppid=5547 pid=22360 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655827.075:4246351): proctitle="dovecot/imap"
type=AVC msg=audit(1674655827.075:4246352): avc: denied { getattr } for pid=22360 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655827.075:4246352): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffed960bfe0 a2=7ffed960bfe0 a3=7ffed960ba60 items=0 ppid=5547 pid=22360 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655827.075:4246352): proctitle="dovecot/imap"
type=AVC msg=audit(1674655827.075:4246353): avc: denied { write } for pid=22360 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655827.075:4246353): arch=c000003e syscall=2 success=yes exit=10 a0=55c406f67960 a1=2 a2=7ffed960bd80 a3=7ffed960b820 items=0 ppid=5547 pid=22360 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655827.075:4246353): proctitle="dovecot/imap"
type=AVC msg=audit(1674655827.075:4246354): avc: denied { lock } for pid=22360 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655827.075:4246354): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffed960bc80 a3=63d13853 items=0 ppid=5547 pid=22360 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655827.075:4246354): proctitle="dovecot/imap"
type=AVC msg=audit(1674655827.076:4246355): avc: denied { read } for pid=22360 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674655827.076:4246355): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55c406f90300 a2=90800 a3=0 items=0 ppid=5547 pid=22360 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655827.076:4246355): proctitle="dovecot/imap"
type=AVC msg=audit(1674655827.076:4246356): avc: denied { getattr } for pid=22360 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674655827.076:4246356): arch=c000003e syscall=4 success=yes exit=0 a0=55c406f52a60 a1=7ffed960c030 a2=7ffed960c030 a3=6f632e6f72676173 items=0 ppid=5547 pid=22360 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655827.076:4246356): proctitle="dovecot/imap"
type=AVC msg=audit(1674655829.308:4246357): avc: denied { write } for pid=22424 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674655829.308:4246357): arch=c000003e syscall=21 success=yes exit=0 a0=5575303ff4c0 a1=2 a2=7b48 a3=7ffe98c6f760 items=0 ppid=5547 pid=22424 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674655829.308:4246357): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674655861.267:4246358): pid=22613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655861.267:4246359): pid=22613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655861.269:4246360): pid=22613 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257931 res=1
type=USER_START msg=audit(1674655861.290:4246361): pid=22613 uid=0 auid=1055 ses=257931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655861.291:4246362): pid=22613 uid=0 auid=1055 ses=257931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655861.565:4246363): pid=22613 uid=0 auid=1055 ses=257931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655861.567:4246364): pid=22613 uid=0 auid=1055 ses=257931 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655921.585:4246365): pid=22832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655921.585:4246366): pid=22832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655921.586:4246367): pid=22832 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257932 res=1
type=USER_START msg=audit(1674655921.615:4246368): pid=22832 uid=0 auid=1055 ses=257932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655921.617:4246369): pid=22832 uid=0 auid=1055 ses=257932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655921.995:4246370): pid=22832 uid=0 auid=1055 ses=257932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655921.996:4246371): pid=22832 uid=0 auid=1055 ses=257932 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655982.022:4246372): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674655982.022:4246373): pid=23027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655982.022:4246374): pid=23027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674655982.022:4246375): pid=23026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674655982.022:4246376): pid=23027 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257933 res=1
type=LOGIN msg=audit(1674655982.023:4246377): pid=23026 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257934 res=1
type=USER_START msg=audit(1674655982.037:4246378): pid=23027 uid=0 auid=1055 ses=257933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655982.045:4246379): pid=23027 uid=0 auid=1055 ses=257933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674655982.069:4246380): pid=23026 uid=0 auid=0 ses=257934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674655982.070:4246381): pid=23026 uid=0 auid=0 ses=257934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655982.132:4246382): pid=23026 uid=0 auid=0 ses=257934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655982.135:4246383): pid=23026 uid=0 auid=0 ses=257934 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674655982.379:4246384): pid=23027 uid=0 auid=1055 ses=257933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674655982.380:4246385): pid=23027 uid=0 auid=1055 ses=257933 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674656001.242:4246386): avc: denied { read } for pid=23091 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674656001.242:4246386): avc: denied { open } for pid=23091 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656001.242:4246386): arch=c000003e syscall=2 success=yes exit=18 a0=55e4f4ddbf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=23091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656001.242:4246386): proctitle="dovecot/auth"
type=AVC msg=audit(1674656001.242:4246387): avc: denied { getattr } for pid=23091 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656001.242:4246387): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd51e509b0 a2=7ffd51e509b0 a3=fffffc00 items=0 ppid=5547 pid=23091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656001.242:4246387): proctitle="dovecot/auth"
type=AVC msg=audit(1674656003.074:4246388): avc: denied { name_connect } for pid=23091 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656003.074:4246388): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd51e507a0 a2=10 a3=7ffd51e5079c items=0 ppid=5547 pid=23091 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656003.074:4246388): proctitle="dovecot/auth"
type=AVC msg=audit(1674656003.103:4246389): avc: denied { write } for pid=23100 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656003.103:4246389): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff5cd737b0 a2=6e a3=63d13903 items=0 ppid=5547 pid=23100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656003.103:4246389): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674656013.113:4246390): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674656013.113:4246390): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2affaa547010 items=0 ppid=23162 pid=23168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656013.113:4246390): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231392E3134362E3132322E3133002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674656041.395:4246391): pid=23255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656041.395:4246392): pid=23255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656041.395:4246393): pid=23255 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257935 res=1
type=USER_START msg=audit(1674656041.413:4246394): pid=23255 uid=0 auid=1055 ses=257935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656041.416:4246395): pid=23255 uid=0 auid=1055 ses=257935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656041.685:4246396): pid=23255 uid=0 auid=1055 ses=257935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656041.685:4246397): pid=23255 uid=0 auid=1055 ses=257935 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656101.699:4246398): pid=23457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656101.699:4246399): pid=23458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656101.699:4246400): pid=23458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656101.699:4246402): pid=23457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656101.699:4246401): pid=23459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656101.699:4246403): pid=23459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656101.700:4246404): pid=23457 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257936 res=1
type=LOGIN msg=audit(1674656101.700:4246405): pid=23458 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257937 res=1
type=LOGIN msg=audit(1674656101.700:4246406): pid=23459 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257938 res=1
type=USER_START msg=audit(1674656101.738:4246409): pid=23459 uid=0 auid=1055 ses=257938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674656101.738:4246407): pid=23457 uid=0 auid=0 ses=257936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674656101.738:4246408): pid=23458 uid=0 auid=0 ses=257937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656101.739:4246410): pid=23459 uid=0 auid=1055 ses=257938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656101.740:4246411): pid=23457 uid=0 auid=0 ses=257936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656101.740:4246412): pid=23458 uid=0 auid=0 ses=257937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656101.820:4246413): pid=23457 uid=0 auid=0 ses=257936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656101.822:4246414): pid=23457 uid=0 auid=0 ses=257936 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656102.038:4246415): pid=23459 uid=0 auid=1055 ses=257938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656102.042:4246416): pid=23459 uid=0 auid=1055 ses=257938 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656105.087:4246417): pid=23458 uid=0 auid=0 ses=257937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656105.089:4246418): pid=23458 uid=0 auid=0 ses=257937 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674656143.426:4246419): avc: denied { read } for pid=23647 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674656143.426:4246419): avc: denied { open } for pid=23647 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656143.426:4246419): arch=c000003e syscall=2 success=yes exit=18 a0=55a5bb4d2f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=23647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656143.426:4246419): proctitle="dovecot/auth"
type=AVC msg=audit(1674656143.426:4246420): avc: denied { getattr } for pid=23647 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656143.426:4246420): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff8f0c5ca0 a2=7fff8f0c5ca0 a3=fffffc00 items=0 ppid=5547 pid=23647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656143.426:4246420): proctitle="dovecot/auth"
type=AVC msg=audit(1674656143.946:4246421): avc: denied { name_connect } for pid=23647 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656143.946:4246421): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff8f0c5a90 a2=10 a3=7fff8f0c5a8c items=0 ppid=5547 pid=23647 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656143.946:4246421): proctitle="dovecot/auth"
type=AVC msg=audit(1674656143.977:4246422): avc: denied { write } for pid=23675 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656143.977:4246422): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd667e6ea0 a2=6e a3=63d1398f items=0 ppid=5547 pid=23675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656143.977:4246422): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674656161.109:4246423): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656161.109:4246424): pid=23777 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656161.110:4246425): pid=23777 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257939 res=1
type=USER_START msg=audit(1674656161.129:4246426): pid=23777 uid=0 auid=1055 ses=257939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656161.132:4246427): pid=23777 uid=0 auid=1055 ses=257939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656161.458:4246428): pid=23777 uid=0 auid=1055 ses=257939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656161.460:4246429): pid=23777 uid=0 auid=1055 ses=257939 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656221.478:4246430): pid=23965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656221.478:4246431): pid=23965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656221.479:4246432): pid=23965 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257940 res=1
type=USER_START msg=audit(1674656221.496:4246433): pid=23965 uid=0 auid=1055 ses=257940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656221.497:4246434): pid=23965 uid=0 auid=1055 ses=257940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656221.822:4246435): pid=23965 uid=0 auid=1055 ses=257940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656221.824:4246436): pid=23965 uid=0 auid=1055 ses=257940 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656281.842:4246437): pid=24151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656281.842:4246438): pid=24151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656281.842:4246439): pid=24151 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257941 res=1
type=USER_START msg=audit(1674656281.854:4246440): pid=24151 uid=0 auid=1055 ses=257941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656281.856:4246441): pid=24151 uid=0 auid=1055 ses=257941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656282.202:4246442): pid=24151 uid=0 auid=1055 ses=257941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656282.204:4246443): pid=24151 uid=0 auid=1055 ses=257941 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656341.217:4246444): pid=24335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656341.217:4246445): pid=24335 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656341.218:4246446): pid=24335 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257942 res=1
type=USER_START msg=audit(1674656341.227:4246447): pid=24335 uid=0 auid=1055 ses=257942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656341.228:4246448): pid=24335 uid=0 auid=1055 ses=257942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656341.577:4246449): pid=24335 uid=0 auid=1055 ses=257942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656341.578:4246450): pid=24335 uid=0 auid=1055 ses=257942 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674656361.552:4246451): avc: denied { read } for pid=24400 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674656361.552:4246451): avc: denied { open } for pid=24400 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656361.552:4246451): arch=c000003e syscall=2 success=yes exit=18 a0=55ff484a4f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=24400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656361.552:4246451): proctitle="dovecot/auth"
type=AVC msg=audit(1674656361.552:4246452): avc: denied { getattr } for pid=24400 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656361.552:4246452): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd02012210 a2=7ffd02012210 a3=fffffc00 items=0 ppid=5547 pid=24400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656361.552:4246452): proctitle="dovecot/auth"
type=AVC msg=audit(1674656363.612:4246453): avc: denied { name_connect } for pid=24400 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656363.612:4246453): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd02012000 a2=10 a3=7ffd02011ffc items=0 ppid=5547 pid=24400 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656363.612:4246453): proctitle="dovecot/auth"
type=AVC msg=audit(1674656363.643:4246454): avc: denied { write } for pid=24407 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656363.643:4246454): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc7f8ec560 a2=6e a3=63d13a6b items=0 ppid=5547 pid=24407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656363.643:4246454): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674656401.596:4246455): pid=24544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656401.596:4246456): pid=24545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656401.597:4246457): pid=24544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656401.597:4246458): pid=24545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656401.597:4246459): pid=24547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656401.597:4246460): pid=24544 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257943 res=1
type=CRED_ACQ msg=audit(1674656401.597:4246461): pid=24547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656401.597:4246462): pid=24545 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257944 res=1
type=LOGIN msg=audit(1674656401.597:4246463): pid=24547 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257945 res=1
type=USER_ACCT msg=audit(1674656401.599:4246464): pid=24546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656401.599:4246465): pid=24546 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656401.600:4246466): pid=24546 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257946 res=1
type=USER_START msg=audit(1674656401.781:4246467): pid=24547 uid=0 auid=1055 ses=257945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674656401.796:4246468): pid=24546 uid=0 auid=0 ses=257946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674656401.797:4246469): pid=24545 uid=0 auid=0 ses=257944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674656401.797:4246470): pid=24544 uid=0 auid=0 ses=257943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656401.809:4246471): pid=24547 uid=0 auid=1055 ses=257945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656401.818:4246472): pid=24544 uid=0 auid=0 ses=257943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656401.818:4246473): pid=24546 uid=0 auid=0 ses=257946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656401.829:4246474): pid=24545 uid=0 auid=0 ses=257944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656401.888:4246475): pid=24544 uid=0 auid=0 ses=257943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656401.912:4246476): pid=24544 uid=0 auid=0 ses=257943 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656402.067:4246477): pid=24546 uid=0 auid=0 ses=257946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656402.070:4246478): pid=24546 uid=0 auid=0 ses=257946 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656402.259:4246479): pid=24547 uid=0 auid=1055 ses=257945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656402.264:4246480): pid=24547 uid=0 auid=1055 ses=257945 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674656403.905:4246481): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674656403.905:4246481): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0149b45010 items=0 ppid=1588 pid=24579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.905:4246481): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134332E3139302E36302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A33393A3033002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.910:4246482): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674656403.910:4246482): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad8f847a010 items=0 ppid=1588 pid=24580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.910:4246482): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131362E3233372E3132382E3139332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A34303A3332002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.915:4246483): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674656403.915:4246483): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b3304d19010 items=0 ppid=1588 pid=24581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.915:4246483): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3135352E32342E3132392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A34303A3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.919:4246484): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674656403.919:4246484): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b060017e010 items=0 ppid=1588 pid=24582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.919:4246484): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E37312E3232342E3232302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A34383A3235002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.923:4246485): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674656403.923:4246485): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2abda1448010 items=0 ppid=1588 pid=24583 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.923:4246485): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3138362E3136392E3138302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A35363A3235002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.927:4246486): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674656403.927:4246486): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b856caf9010 items=0 ppid=1588 pid=24584 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.927:4246486): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036352E32302E3230352E3139372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431333A35363A3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.930:4246487): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674656403.930:4246487): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ab5fc3c5010 items=0 ppid=1588 pid=24585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.930:4246487): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132342E3136342E3233352E3230382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A30323A3130002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.934:4246488): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674656403.934:4246488): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ba363c28010 items=0 ppid=1588 pid=24586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.934:4246488): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035392E35332E3138322E39352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A30323A3231002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.938:4246489): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674656403.938:4246489): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b26dbe4c010 items=0 ppid=1588 pid=24587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.938:4246489): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036322E3133382E31382E392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A31303A3232002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656403.942:4246490): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674656403.942:4246490): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b2abfb79010 items=0 ppid=1588 pid=24588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656403.942:4246490): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E35312E3138392E3138322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A31323A3230002D6A0044524F50
type=CRED_DISP msg=audit(1674656405.300:4246491): pid=24545 uid=0 auid=0 ses=257944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656405.303:4246492): pid=24545 uid=0 auid=0 ses=257944 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674656451.331:4246493): avc: denied { read } for pid=24773 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674656451.331:4246493): avc: denied { open } for pid=24773 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656451.331:4246493): arch=c000003e syscall=2 success=yes exit=18 a0=560fdd333f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=24773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656451.331:4246493): proctitle="dovecot/auth"
type=AVC msg=audit(1674656451.331:4246494): avc: denied { getattr } for pid=24773 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656451.331:4246494): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcc2890500 a2=7ffcc2890500 a3=fffffc00 items=0 ppid=5547 pid=24773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656451.331:4246494): proctitle="dovecot/auth"
type=AVC msg=audit(1674656451.833:4246495): avc: denied { name_connect } for pid=24773 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656451.833:4246495): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcc28902f0 a2=10 a3=7ffcc28902ec items=0 ppid=5547 pid=24773 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656451.833:4246495): proctitle="dovecot/auth"
type=AVC msg=audit(1674656451.862:4246496): avc: denied { write } for pid=24801 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656451.862:4246496): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffef7d20710 a2=6e a3=63d13ac3 items=0 ppid=5547 pid=24801 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656451.862:4246496): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674656461.327:4246497): pid=24875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656461.328:4246498): pid=24875 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656461.329:4246499): pid=24875 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257947 res=1
type=USER_START msg=audit(1674656461.348:4246500): pid=24875 uid=0 auid=1055 ses=257947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656461.350:4246501): pid=24875 uid=0 auid=1055 ses=257947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656461.601:4246502): pid=24875 uid=0 auid=1055 ses=257947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656461.604:4246503): pid=24875 uid=0 auid=1055 ses=257947 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656465.242:4246504): pid=24894 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.242:4246505): pid=24894 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.242:4246506): pid=24894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.264:4246507): pid=24894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.267:4246508): pid=24894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.267:4246509): pid=24894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.287:4246510): pid=24898 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.289:4246511): pid=24898 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.289:4246512): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.301:4246513): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.305:4246514): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.305:4246515): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.326:4246516): pid=24904 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.326:4246517): pid=24904 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.326:4246518): pid=24904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.340:4246519): pid=24904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.344:4246520): pid=24904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.344:4246521): pid=24904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.472:4246522): pid=24910 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.472:4246523): pid=24910 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.472:4246524): pid=24910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.486:4246525): pid=24910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.489:4246526): pid=24910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.489:4246527): pid=24910 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.510:4246528): pid=24915 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.510:4246529): pid=24915 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.510:4246530): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.524:4246531): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.528:4246532): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.528:4246533): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.551:4246534): pid=24921 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.551:4246535): pid=24921 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.551:4246536): pid=24921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.566:4246537): pid=24921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.569:4246538): pid=24921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.569:4246539): pid=24921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.600:4246540): pid=24928 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.600:4246541): pid=24928 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.601:4246542): pid=24928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.615:4246543): pid=24928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.619:4246544): pid=24928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.619:4246545): pid=24928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.641:4246546): pid=24931 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.641:4246547): pid=24931 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.641:4246548): pid=24931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.654:4246549): pid=24931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.657:4246550): pid=24931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.657:4246551): pid=24931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.678:4246552): pid=24935 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.678:4246553): pid=24935 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.679:4246554): pid=24935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.693:4246555): pid=24935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.696:4246556): pid=24935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.696:4246557): pid=24935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.717:4246558): pid=24940 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.717:4246559): pid=24940 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.718:4246560): pid=24940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.733:4246561): pid=24940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.737:4246562): pid=24940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.737:4246563): pid=24940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656465.758:4246564): pid=24945 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656465.758:4246565): pid=24945 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656465.758:4246566): pid=24945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656465.773:4246567): pid=24945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656465.776:4246568): pid=24945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656465.777:4246569): pid=24945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656467.897:4246570): pid=24958 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656467.897:4246571): pid=24958 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656467.897:4246572): pid=24958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656467.913:4246573): pid=24958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656467.977:4246574): pid=24958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656467.977:4246575): pid=24958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656468.009:4246576): pid=24964 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656468.009:4246577): pid=24964 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656468.009:4246578): pid=24964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656468.021:4246579): pid=24964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656468.102:4246580): pid=24964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656468.102:4246581): pid=24964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656468.125:4246582): pid=24970 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656468.125:4246583): pid=24970 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F75736572735F66656174757265735F73657474696E677320757365722D313D776F6F647065636B20757365722D323D7777776B6170696E20757365722D333D646973706F7365617420757365722D343D7777776B6D616F726720757365722D353D72656D797361677220757365722D363D706D637265736F757263657320757365722D373D76666D61737365747320757365722D383D7368616C696E696A616D657320757365722D393D7777777465737475676F20757365722D31303D7374726169676874637572766520757365722D31313D7777776C6574737374616C6B666F6F6420757365722D31323D626F6E696661636567726F757020757365722D31333D77777765766D686F6E646120757365722D31343D6D7273636C65616E20757365722D31353D7777776E6578696469676974616C20757365722D31363D70616C636F31323320757365722D31373D6769667465726D616E20757365722D31383D6B6F74746179616D63616C6C6472697620757365722D31393D70686D6574616C7320757365722D32303D636F6368696E7461786920757365722D32313D7777776B61726574616B65727320757365722D32323D6C61756E647279626F6E696661636520757365722D32333D61327A67726F757020757365722D32343D6461727473696D7020757365722D32353D777777706D637265736F7572636520757365722D32363D6B6572616C61686F6C6920757365722D32373D7777777265736F7572636568756E746520757365722D32383D777777726D73776C6C20757365722D32393D75676F7473636F6D20757365722D33303D74726176656C626F6E696661636520666561747572652D313D66696C656D616E6167657220666561747572652D323D6261636B757020666561747572652D333D63726F6E20666561747572652D343D7068706D7961646D696E20666561747572652D353D6D7973716C20666561747572652D363D6D756C746970687020666561747572652D373D6164646F6E646F6D61696E7320666561747572652D383D737562646F6D61696E7320666561747572652D393D77656270726F7465637420666561747572652D31303D73736C696E7374616C6C20666561747572652D31313D77702D746F6F6C6B697420666561747572652D31323D77702D746F6F6C6B69742D64656C757865202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656468.126:4246584): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656468.139:4246585): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656468.255:4246586): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656468.255:4246587): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656468.293:4246588): pid=24976 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656468.293:4246589): pid=24976 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674656468.293:4246590): pid=24976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656468.311:4246591): pid=24976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656468.314:4246592): pid=24976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656468.314:4246593): pid=24976 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656468.339:4246594): pid=24979 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656468.339:4246595): pid=24979 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D56456F4B487831775462494A337554572E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674656468.339:4246596): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656468.353:4246597): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656468.357:4246598): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656468.357:4246599): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656468.378:4246600): pid=24983 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656468.378:4246601): pid=24983 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D56456F4B487831775462494A337554572E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674656468.378:4246602): pid=24983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656468.393:4246603): pid=24983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656468.398:4246604): pid=24983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656468.398:4246605): pid=24983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656468.421:4246606): pid=24990 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656468.421:4246607): pid=24990 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D56456F4B487831775462494A337554572E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674656468.421:4246608): pid=24990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656468.434:4246609): pid=24990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656468.438:4246610): pid=24990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656468.438:4246611): pid=24990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656468.461:4246612): pid=24995 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656468.461:4246613): pid=24995 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674656468.461:4246614): pid=24995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656468.473:4246615): pid=24995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656468.479:4246616): pid=24995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656468.479:4246617): pid=24995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656469.186:4246618): pid=25001 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656469.186:4246619): pid=25001 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674656469.186:4246620): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656469.204:4246621): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656469.207:4246622): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656469.207:4246623): pid=25001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656469.607:4246624): pid=25006 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656469.607:4246625): pid=25006 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674656469.607:4246626): pid=25006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656469.623:4246627): pid=25006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656469.625:4246628): pid=25006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656469.625:4246629): pid=25006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656469.646:4246630): pid=25013 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656469.646:4246631): pid=25013 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674656469.648:4246632): pid=25013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656469.661:4246633): pid=25013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656469.665:4246634): pid=25013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656469.665:4246635): pid=25013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656469.685:4246636): pid=25016 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656469.685:4246637): pid=25016 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674656469.685:4246638): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656469.697:4246639): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656469.701:4246640): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656469.701:4246641): pid=25016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656469.726:4246642): pid=25020 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656469.726:4246643): pid=25020 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656469.726:4246644): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656469.741:4246645): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656469.865:4246646): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656469.865:4246647): pid=25020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656470.731:4246648): pid=25027 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656470.731:4246649): pid=25027 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656470.733:4246650): pid=25027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656470.750:4246651): pid=25027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656470.806:4246652): pid=25027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656470.806:4246653): pid=25027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656470.837:4246654): pid=25034 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656470.837:4246655): pid=25034 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674656470.837:4246656): pid=25034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656470.853:4246657): pid=25034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656472.028:4246658): pid=25034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656472.028:4246659): pid=25034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656472.233:4246660): pid=25045 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656472.233:4246661): pid=25045 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674656472.235:4246662): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656472.249:4246663): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656473.481:4246664): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656473.481:4246665): pid=25045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656473.686:4246666): pid=25057 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656473.687:4246667): pid=25057 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656473.687:4246668): pid=25057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656473.702:4246669): pid=25057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656475.603:4246670): pid=25057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656475.603:4246671): pid=25057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656475.851:4246672): pid=25071 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656475.852:4246673): pid=25071 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674656475.852:4246674): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656475.871:4246675): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656477.048:4246676): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656477.048:4246677): pid=25071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656477.138:4246678): pid=25082 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656477.139:4246679): pid=25082 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674656477.139:4246680): pid=25082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656477.154:4246681): pid=25082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656477.520:4246682): pid=25082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656477.520:4246683): pid=25082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656477.643:4246684): pid=25087 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656477.644:4246685): pid=25087 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674656477.644:4246686): pid=25087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656477.659:4246687): pid=25087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656479.878:4246688): pid=25087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656479.878:4246689): pid=25087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656480.144:4246690): pid=25108 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656480.144:4246691): pid=25108 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674656480.144:4246692): pid=25108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656480.158:4246693): pid=25108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656481.324:4246694): pid=25108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656481.324:4246695): pid=25108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656481.590:4246696): pid=25121 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656481.590:4246697): pid=25121 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F736974652026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F73697465202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656481.590:4246698): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656481.605:4246699): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656482.732:4246700): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656482.732:4246701): pid=25121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656483.601:4246702): pid=25133 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674656483.601:4246703): pid=25133 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674656483.601:4246704): pid=25133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674656483.616:4246705): pid=25133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674656484.793:4246706): pid=25133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674656484.793:4246707): pid=25133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656521.623:4246708): pid=25264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656521.623:4246709): pid=25264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656521.623:4246710): pid=25264 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257948 res=1
type=USER_START msg=audit(1674656521.639:4246711): pid=25264 uid=0 auid=1055 ses=257948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656521.642:4246712): pid=25264 uid=0 auid=1055 ses=257948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656522.000:4246713): pid=25264 uid=0 auid=1055 ses=257948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656522.002:4246714): pid=25264 uid=0 auid=1055 ses=257948 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656581.017:4246715): pid=25461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656581.017:4246716): pid=25461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656581.017:4246717): pid=25461 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257949 res=1
type=USER_START msg=audit(1674656581.030:4246718): pid=25461 uid=0 auid=1055 ses=257949 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656581.031:4246719): pid=25461 uid=0 auid=1055 ses=257949 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656581.362:4246720): pid=25461 uid=0 auid=1055 ses=257949 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656581.363:4246721): pid=25461 uid=0 auid=1055 ses=257949 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674656585.797:4246722): avc: denied { read } for pid=25484 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674656585.797:4246722): avc: denied { open } for pid=25484 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656585.797:4246722): arch=c000003e syscall=2 success=yes exit=18 a0=560f01e10f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=25484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656585.797:4246722): proctitle="dovecot/auth"
type=AVC msg=audit(1674656585.797:4246723): avc: denied { getattr } for pid=25484 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656585.797:4246723): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffef4a21a60 a2=7ffef4a21a60 a3=fffffc00 items=0 ppid=5547 pid=25484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656585.797:4246723): proctitle="dovecot/auth"
type=AVC msg=audit(1674656588.011:4246724): avc: denied { name_connect } for pid=25484 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656588.011:4246724): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffef4a21850 a2=10 a3=7ffef4a2184c items=0 ppid=5547 pid=25484 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656588.011:4246724): proctitle="dovecot/auth"
type=AVC msg=audit(1674656588.044:4246725): avc: denied { write } for pid=25497 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656588.044:4246725): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe2c111fd0 a2=6e a3=63d13b4c items=0 ppid=5547 pid=25497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656588.044:4246725): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674656624.379:4246726): pid=25628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656624.380:4246727): pid=25628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656624.380:4246728): pid=25628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25628 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656624.625:4246729): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=25628 suid=74 rport=51080 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656624.626:4246730): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=25628 suid=74 rport=51080 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=? res=success'
type=USER_AUTH msg=audit(1674656625.739:4246731): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=128.199.57.142 addr=128.199.57.142 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674656627.409:4246732): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674656627.654:4246733): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25628 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656627.654:4246734): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25628 suid=74 rport=51080 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656627.655:4246735): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656627.655:4246736): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656627.655:4246737): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25627 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674656627.655:4246738): pid=25627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674656641.381:4246739): pid=25669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656641.381:4246740): pid=25669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656641.383:4246741): pid=25669 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257950 res=1
type=USER_START msg=audit(1674656641.404:4246742): pid=25669 uid=0 auid=1055 ses=257950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656641.406:4246743): pid=25669 uid=0 auid=1055 ses=257950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656641.660:4246744): pid=25669 uid=0 auid=1055 ses=257950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656641.661:4246745): pid=25669 uid=0 auid=1055 ses=257950 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674656650.891:4246746): pid=25706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656650.891:4246747): pid=25706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656650.892:4246748): pid=25706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656651.014:4246749): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25706 suid=74 rport=64358 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656651.014:4246750): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25706 suid=74 rport=64358 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=? res=success'
type=USER_AUTH msg=audit(1674656651.662:4246751): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=183.180.128.204 addr=183.180.128.204 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674656654.235:4246752): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674656654.389:4246753): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25706 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656654.389:4246754): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25706 suid=74 rport=64358 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656654.389:4246755): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656654.389:4246756): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656654.389:4246757): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25705 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674656654.390:4246758): pid=25705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674656658.367:4246759): pid=25734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656658.367:4246760): pid=25734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656658.367:4246761): pid=25734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656659.102:4246762): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=25734 suid=74 rport=53681 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656659.102:4246763): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=25734 suid=74 rport=53681 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=USER_AUTH msg=audit(1674656660.821:4246764): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674656662.295:4246765): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674656662.789:4246766): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25734 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656662.789:4246767): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25734 suid=74 rport=53681 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656662.790:4246768): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656662.790:4246769): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656662.790:4246770): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674656662.790:4246771): pid=25727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=AVC msg=audit(1674656668.422:4246772): avc: denied { name_connect } for pid=25777 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656668.422:4246772): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdfa183a40 a2=10 a3=7ffdfa183a3c items=0 ppid=5547 pid=25777 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656668.422:4246772): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674656669.532:4246773): table=filter family=2 entries=1027
type=SYSCALL msg=audit(1674656669.532:4246773): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5e2e1f6010 items=0 ppid=25788 pid=25793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656669.532:4246773): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3138332E34312E313936002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674656675.879:4246774): avc: denied { write } for pid=25813 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656675.879:4246774): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe114dc010 a2=6e a3=63d13ba3 items=0 ppid=5547 pid=25813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656675.879:4246774): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674656698.470:4246775): pid=25889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656698.470:4246776): pid=25889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656698.470:4246777): pid=25889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25889 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656698.701:4246778): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25889 suid=74 rport=45088 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656698.702:4246779): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25889 suid=74 rport=45088 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=? res=success'
type=USER_AUTH msg=audit(1674656699.770:4246780): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=117.52.173.97 addr=117.52.173.97 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674656701.679:4246781): pid=25903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656701.679:4246782): pid=25905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656701.679:4246783): pid=25904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656701.679:4246784): pid=25903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656701.679:4246785): pid=25905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656701.679:4246786): pid=25904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656701.679:4246787): pid=25903 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257951 res=1
type=LOGIN msg=audit(1674656701.679:4246788): pid=25904 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257952 res=1
type=LOGIN msg=audit(1674656701.679:4246789): pid=25905 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257953 res=1
type=USER_START msg=audit(1674656701.752:4246790): pid=25903 uid=0 auid=0 ses=257951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674656701.753:4246791): pid=25905 uid=0 auid=1055 ses=257953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656701.753:4246792): pid=25905 uid=0 auid=1055 ses=257953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656701.753:4246793): pid=25903 uid=0 auid=0 ses=257951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674656701.773:4246794): pid=25904 uid=0 auid=0 ses=257952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656701.773:4246795): pid=25904 uid=0 auid=0 ses=257952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674656701.941:4246796): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674656702.133:4246797): pid=25905 uid=0 auid=1055 ses=257953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656702.134:4246798): pid=25903 uid=0 auid=0 ses=257951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656702.137:4246799): pid=25905 uid=0 auid=1055 ses=257953 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656702.139:4246800): pid=25903 uid=0 auid=0 ses=257951 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674656702.194:4246801): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25889 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656702.195:4246802): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25889 suid=74 rport=45088 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656702.197:4246803): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656702.197:4246804): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656702.197:4246805): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25888 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674656702.197:4246806): pid=25888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674656705.316:4246807): pid=25904 uid=0 auid=0 ses=257952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656705.319:4246808): pid=25904 uid=0 auid=0 ses=257952 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674656705.896:4246809): avc: denied { write } for pid=25813 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656705.896:4246809): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe114dc010 a2=6e a3=63d13bc1 items=0 ppid=5547 pid=25813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656705.896:4246809): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674656747.664:4246810): avc: denied { name_connect } for pid=25777 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656747.664:4246810): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdfa183a40 a2=10 a3=7ffdfa183a3c items=0 ppid=5547 pid=25777 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656747.664:4246810): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674656748.752:4246811): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674656748.752:4246811): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2afffea3d010 items=0 ppid=26084 pid=26089 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656748.752:4246811): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3136362E39352E3137002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=CRYPTO_KEY_USER msg=audit(1674656760.908:4246812): pid=26218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656760.909:4246813): pid=26218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656760.909:4246814): pid=26218 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26218 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674656761.342:4246815): pid=26219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656761.342:4246816): pid=26219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656761.344:4246817): pid=26219 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257954 res=1
type=USER_START msg=audit(1674656761.363:4246818): pid=26219 uid=0 auid=1055 ses=257954 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656761.366:4246819): pid=26219 uid=0 auid=1055 ses=257954 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656761.680:4246820): pid=26219 uid=0 auid=1055 ses=257954 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656761.683:4246821): pid=26219 uid=0 auid=1055 ses=257954 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674656765.968:4246822): avc: denied { read append } for pid=26243 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674656765.968:4246822): avc: denied { open } for pid=26243 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656765.968:4246822): arch=c000003e syscall=2 success=yes exit=8 a0=5580e3ee1a60 a1=402 a2=7ffd123f1340 a3=7ffd123f0de0 items=0 ppid=5547 pid=26243 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656765.968:4246822): proctitle="dovecot/imap"
type=AVC msg=audit(1674656765.968:4246823): avc: denied { getattr } for pid=26243 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656765.968:4246823): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffd123f12a0 a2=7ffd123f12a0 a3=7ffd123f0d20 items=0 ppid=5547 pid=26243 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656765.968:4246823): proctitle="dovecot/imap"
type=AVC msg=audit(1674656765.969:4246824): avc: denied { write } for pid=26243 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656765.969:4246824): arch=c000003e syscall=2 success=yes exit=10 a0=5580e3ee6990 a1=2 a2=7ffd123f1040 a3=7ffd123f0ae0 items=0 ppid=5547 pid=26243 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656765.969:4246824): proctitle="dovecot/imap"
type=AVC msg=audit(1674656765.969:4246825): avc: denied { lock } for pid=26243 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656765.969:4246825): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffd123f0f40 a3=63d13bfd items=0 ppid=5547 pid=26243 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656765.969:4246825): proctitle="dovecot/imap"
type=AVC msg=audit(1674656765.969:4246826): avc: denied { read } for pid=26243 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674656765.969:4246826): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5580e3f0f300 a2=90800 a3=0 items=0 ppid=5547 pid=26243 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656765.969:4246826): proctitle="dovecot/imap"
type=AVC msg=audit(1674656765.970:4246827): avc: denied { getattr } for pid=26243 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656765.970:4246827): arch=c000003e syscall=4 success=yes exit=0 a0=5580e3ed1a60 a1=7ffd123f12f0 a2=7ffd123f12f0 a3=6f632e6f72676173 items=0 ppid=5547 pid=26243 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656765.970:4246827): proctitle="dovecot/imap"
type=CRYPTO_SESSION msg=audit(1674656767.381:4246828): pid=26216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=26218 suid=74 rport=61234 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.125.131.207 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656767.381:4246829): pid=26216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=26218 suid=74 rport=61234 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.125.131.207 terminal=? res=success'
type=AVC msg=audit(1674656768.689:4246830): avc: denied { write } for pid=26253 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674656768.689:4246830): arch=c000003e syscall=21 success=yes exit=0 a0=55a1a74f34c0 a1=2 a2=7b48 a3=7fff5e353d60 items=0 ppid=5547 pid=26253 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656768.689:4246830): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674656770.618:4246831): pid=26216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26218 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656770.618:4246832): pid=26216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26218 suid=74 rport=61234 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.125.131.207 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656770.619:4246833): pid=26216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656770.619:4246834): pid=26216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656770.619:4246835): pid=26216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26216 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674656770.619:4246836): pid=26216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.125.131.207 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674656796.486:4246837): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674656796.486:4246837): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab45c70e010 items=0 ppid=26368 pid=26373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656796.486:4246837): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132342E37392E3234362E313732002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674656808.041:4246838): avc: denied { name_connect } for pid=25777 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656808.041:4246838): arch=c000003e syscall=42 success=no exit=-115 a0=19 a1=7ffdfa183a40 a2=10 a3=7ffdfa183a3c items=0 ppid=5547 pid=25777 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656808.041:4246838): proctitle="dovecot/auth"
type=AVC msg=audit(1674656808.055:4246839): avc: denied { write } for pid=25813 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656808.055:4246839): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe114dc010 a2=6e a3=63d13c28 items=0 ppid=5547 pid=25813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656808.055:4246839): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674656821.718:4246840): pid=26448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656821.718:4246841): pid=26448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656821.719:4246842): pid=26448 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257955 res=1
type=USER_START msg=audit(1674656821.788:4246843): pid=26448 uid=0 auid=1055 ses=257955 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656821.789:4246844): pid=26448 uid=0 auid=1055 ses=257955 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656822.150:4246845): pid=26448 uid=0 auid=1055 ses=257955 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656822.153:4246846): pid=26448 uid=0 auid=1055 ses=257955 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656881.169:4246847): pid=26645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674656881.169:4246848): pid=26646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656881.169:4246849): pid=26645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656881.169:4246850): pid=26646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656881.169:4246852): pid=26646 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257957 res=1
type=LOGIN msg=audit(1674656881.169:4246851): pid=26645 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257956 res=1
type=USER_START msg=audit(1674656881.201:4246853): pid=26646 uid=0 auid=1055 ses=257957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674656881.203:4246854): pid=26645 uid=0 auid=0 ses=257956 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656881.203:4246855): pid=26646 uid=0 auid=1055 ses=257957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656881.206:4246856): pid=26645 uid=0 auid=0 ses=257956 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656881.255:4246857): pid=26645 uid=0 auid=0 ses=257956 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656881.258:4246858): pid=26645 uid=0 auid=0 ses=257956 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656881.471:4246859): pid=26646 uid=0 auid=1055 ses=257957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656881.473:4246860): pid=26646 uid=0 auid=1055 ses=257957 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674656899.961:4246861): pid=26710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656899.961:4246862): pid=26710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656899.961:4246863): pid=26710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26710 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656900.412:4246864): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=26710 suid=74 rport=57030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656900.412:4246865): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=26710 suid=74 rport=57030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674656901.146:4246866): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674656903.372:4246867): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674656903.641:4246868): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26710 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656903.641:4246869): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26710 suid=74 rport=57030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656903.642:4246870): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656903.643:4246871): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656903.643:4246872): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26706 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674656903.643:4246873): pid=26706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674656904.574:4246874): pid=26723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656904.574:4246875): pid=26723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656904.574:4246876): pid=26723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656904.831:4246877): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=26723 suid=74 rport=42218 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674656904.832:4246878): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=26723 suid=74 rport=42218 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=? res=success'
type=USER_AUTH msg=audit(1674656905.984:4246879): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=128.199.57.142 addr=128.199.57.142 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674656908.427:4246880): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674656908.719:4246881): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26723 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656908.719:4246882): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26723 suid=74 rport=42218 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656908.720:4246883): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656908.720:4246884): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674656908.720:4246885): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674656908.720:4246886): pid=26720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=128.199.57.142 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674656908.875:4246887): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674656908.875:4246887): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd7f31bf010 items=0 ppid=26769 pid=26773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656908.875:4246887): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674656908.879:4246888): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674656908.879:4246888): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff1faa10010 items=0 ppid=26769 pid=26774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656908.879:4246888): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674656908.884:4246889): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674656908.884:4246889): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb7dbc4a010 items=0 ppid=26769 pid=26775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656908.884:4246889): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674656908.888:4246890): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674656908.888:4246890): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7faaeef53010 items=0 ppid=26769 pid=26776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656908.888:4246890): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674656909.188:4246891): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674656909.188:4246891): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb50b779010 items=0 ppid=26769 pid=26784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656909.188:4246891): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730036382E3138332E3138382E313539002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656909.194:4246892): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674656909.194:4246892): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc9b853d010 items=0 ppid=26769 pid=26785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656909.194:4246892): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640036382E3138332E3138382E313539002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674656909.200:4246893): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674656909.200:4246893): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6577fe0010 items=0 ppid=26769 pid=26786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656909.200:4246893): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003132382E3139392E35372E313432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674656909.205:4246894): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674656909.205:4246894): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f71f0afe010 items=0 ppid=26769 pid=26787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656909.205:4246894): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003132382E3139392E35372E313432002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674656921.485:4246895): avc: denied { read } for pid=26830 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674656921.485:4246895): avc: denied { open } for pid=26830 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656921.485:4246895): arch=c000003e syscall=2 success=yes exit=18 a0=55f8666b2f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=26830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656921.485:4246895): proctitle="dovecot/auth"
type=AVC msg=audit(1674656921.485:4246896): avc: denied { getattr } for pid=26830 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674656921.485:4246896): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff894c8e80 a2=7fff894c8e80 a3=fffffc00 items=0 ppid=5547 pid=26830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656921.485:4246896): proctitle="dovecot/auth"
type=AVC msg=audit(1674656924.008:4246897): avc: denied { write } for pid=26842 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674656924.008:4246897): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc3a6b3780 a2=6e a3=63d13c9c items=0 ppid=5547 pid=26842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656924.008:4246897): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674656941.495:4246898): pid=26888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674656941.495:4246899): pid=26888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674656941.495:4246900): pid=26888 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257958 res=1
type=USER_START msg=audit(1674656941.514:4246901): pid=26888 uid=0 auid=1055 ses=257958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674656941.515:4246902): pid=26888 uid=0 auid=1055 ses=257958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674656941.884:4246903): pid=26888 uid=0 auid=1055 ses=257958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674656941.888:4246904): pid=26888 uid=0 auid=1055 ses=257958 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674656942.254:4246905): avc: denied { name_connect } for pid=26830 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674656942.254:4246905): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff894c8c70 a2=10 a3=7fff894c8c6c items=0 ppid=5547 pid=26830 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674656942.254:4246905): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674657001.904:4246906): pid=27086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657001.904:4246907): pid=27086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657001.904:4246908): pid=27086 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257959 res=1
type=USER_ACCT msg=audit(1674657001.906:4246909): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657001.906:4246910): pid=27084 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657001.906:4246911): pid=27084 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257960 res=1
type=USER_ACCT msg=audit(1674657001.906:4246912): pid=27085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657001.906:4246913): pid=27085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657001.907:4246914): pid=27085 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257961 res=1
type=USER_START msg=audit(1674657002.016:4246915): pid=27086 uid=0 auid=1055 ses=257959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657002.016:4246916): pid=27085 uid=0 auid=0 ses=257961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657002.017:4246917): pid=27084 uid=0 auid=0 ses=257960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657002.018:4246919): pid=27085 uid=0 auid=0 ses=257961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657002.018:4246920): pid=27086 uid=0 auid=1055 ses=257959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657002.018:4246918): pid=27084 uid=0 auid=0 ses=257960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657002.103:4246921): pid=27084 uid=0 auid=0 ses=257960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657002.106:4246922): pid=27084 uid=0 auid=0 ses=257960 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657002.375:4246923): pid=27086 uid=0 auid=1055 ses=257959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657002.377:4246924): pid=27086 uid=0 auid=1055 ses=257959 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657005.434:4246925): pid=27085 uid=0 auid=0 ses=257961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657005.438:4246926): pid=27085 uid=0 auid=0 ses=257961 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674657051.278:4246927): avc: denied { read } for pid=27271 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674657051.278:4246927): avc: denied { open } for pid=27271 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657051.278:4246927): arch=c000003e syscall=2 success=yes exit=18 a0=5645b54fff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=27271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657051.278:4246927): proctitle="dovecot/auth"
type=AVC msg=audit(1674657051.278:4246928): avc: denied { getattr } for pid=27271 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657051.278:4246928): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffd21c63a0 a2=7fffd21c63a0 a3=fffffc00 items=0 ppid=5547 pid=27271 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657051.278:4246928): proctitle="dovecot/auth"
type=AVC msg=audit(1674657052.656:4246929): avc: denied { name_connect } for pid=27271 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657052.656:4246929): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffd21c6190 a2=10 a3=7fffd21c618c items=0 ppid=5547 pid=27271 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657052.656:4246929): proctitle="dovecot/auth"
type=AVC msg=audit(1674657052.683:4246930): avc: denied { write } for pid=27277 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657052.683:4246930): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd3de44700 a2=6e a3=63d13d1c items=0 ppid=5547 pid=27277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657052.683:4246930): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674657061.469:4246931): pid=27399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657061.469:4246932): pid=27399 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657061.470:4246933): pid=27399 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257962 res=1
type=USER_START msg=audit(1674657061.493:4246934): pid=27399 uid=0 auid=1055 ses=257962 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657061.495:4246935): pid=27399 uid=0 auid=1055 ses=257962 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657061.803:4246936): pid=27399 uid=0 auid=1055 ses=257962 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657061.805:4246937): pid=27399 uid=0 auid=1055 ses=257962 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674657116.123:4246938): pid=27597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657116.123:4246939): pid=27597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657116.123:4246940): pid=27597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27597 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657116.549:4246941): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27597 suid=74 rport=47274 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657116.550:4246942): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27597 suid=74 rport=47274 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=? res=success'
type=USER_AUTH msg=audit(1674657119.528:4246943): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=212.33.201.52 addr=212.33.201.52 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657119.777:4246944): pid=27609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657119.777:4246945): pid=27609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657119.777:4246946): pid=27609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27609 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657120.022:4246947): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27609 suid=74 rport=35376 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657120.022:4246948): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27609 suid=74 rport=35376 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=? res=success'
type=USER_AUTH msg=audit(1674657121.102:4246949): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=117.52.173.97 addr=117.52.173.97 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657121.348:4246950): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657121.568:4246951): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27597 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657121.568:4246952): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27597 suid=74 rport=47274 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657121.569:4246953): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657121.570:4246954): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657121.570:4246955): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27596 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657121.570:4246956): pid=27596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674657121.824:4246957): pid=27616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657121.825:4246958): pid=27616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657121.825:4246959): pid=27616 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257963 res=1
type=USER_START msg=audit(1674657121.854:4246960): pid=27616 uid=0 auid=1055 ses=257963 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657121.858:4246961): pid=27616 uid=0 auid=1055 ses=257963 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657122.229:4246962): pid=27616 uid=0 auid=1055 ses=257963 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657122.232:4246963): pid=27616 uid=0 auid=1055 ses=257963 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674657123.529:4246964): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657123.771:4246965): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27609 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657123.771:4246966): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27609 suid=74 rport=35376 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657123.773:4246967): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657123.773:4246968): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657123.773:4246969): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27608 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657123.773:4246970): pid=27608 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=117.52.173.97 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674657124.117:4246971): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674657124.117:4246971): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f44697e2010 items=0 ppid=27635 pid=27639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657124.117:4246971): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674657124.122:4246972): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674657124.122:4246972): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1e5f5d3010 items=0 ppid=27635 pid=27640 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657124.122:4246972): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674657124.127:4246973): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674657124.127:4246973): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc5ca271010 items=0 ppid=27635 pid=27641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657124.127:4246973): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674657124.134:4246974): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674657124.134:4246974): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe68335c010 items=0 ppid=27635 pid=27642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657124.134:4246974): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674657124.447:4246975): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674657124.447:4246975): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3659516010 items=0 ppid=27635 pid=27650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657124.447:4246975): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003130332E38392E3133362E39002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674657124.453:4246976): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674657124.453:4246976): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff1ce974010 items=0 ppid=27635 pid=27651 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657124.453:4246976): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003130332E38392E3133362E39002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674657124.458:4246977): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674657124.458:4246977): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f374bb2d010 items=0 ppid=27635 pid=27652 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657124.458:4246977): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003131372E35322E3137332E3937002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674657124.463:4246978): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674657124.463:4246978): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6e928bb010 items=0 ppid=27635 pid=27653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657124.463:4246978): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003131372E35322E3137332E3937002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674657142.483:4246979): avc: denied { name_connect } for pid=27271 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657142.483:4246979): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffd21c6190 a2=10 a3=7fffd21c618c items=0 ppid=5547 pid=27271 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657142.483:4246979): proctitle="dovecot/auth"
type=AVC msg=audit(1674657142.523:4246980): avc: denied { write } for pid=27711 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657142.523:4246980): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffee64090c0 a2=6e a3=63d13d76 items=0 ppid=5547 pid=27711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657142.523:4246980): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674657181.250:4246981): pid=27855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657181.250:4246982): pid=27855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657181.250:4246983): pid=27855 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257964 res=1
type=USER_START msg=audit(1674657181.281:4246984): pid=27855 uid=0 auid=1055 ses=257964 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657181.298:4246985): pid=27855 uid=0 auid=1055 ses=257964 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657181.733:4246986): pid=27855 uid=0 auid=1055 ses=257964 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657181.746:4246987): pid=27855 uid=0 auid=1055 ses=257964 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674657189.130:4246988): pid=27885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657189.131:4246989): pid=27885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657189.131:4246990): pid=27885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27885 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657189.297:4246991): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=27885 suid=74 rport=52330 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657189.297:4246992): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=27885 suid=74 rport=52330 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674657190.243:4246993): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657192.143:4246994): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657195.045:4246995): pid=27904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657195.045:4246996): pid=27904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657195.045:4246997): pid=27904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674657195.314:4246998): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_SESSION msg=audit(1674657195.324:4246999): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=27904 suid=74 rport=55766 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657195.324:4247000): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=27904 suid=74 rport=55766 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=USER_AUTH msg=audit(1674657197.234:4247001): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657197.438:4247002): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657199.296:4247003): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657199.998:4247004): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27904 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657199.998:4247005): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27904 suid=74 rport=55766 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657200.000:4247006): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657200.000:4247007): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657200.000:4247008): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27902 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657200.000:4247009): pid=27902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657200.404:4247010): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657202.008:4247011): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657205.178:4247012): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27885 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657205.178:4247013): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27885 suid=74 rport=52330 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657205.180:4247014): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657205.180:4247015): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657205.180:4247016): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27884 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657205.180:4247017): pid=27884 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=AVC msg=audit(1674657236.347:4247018): avc: denied { read } for pid=28046 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674657236.347:4247018): avc: denied { open } for pid=28046 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657236.347:4247018): arch=c000003e syscall=2 success=yes exit=18 a0=5561c0e41f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=28046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657236.347:4247018): proctitle="dovecot/auth"
type=AVC msg=audit(1674657236.348:4247019): avc: denied { getattr } for pid=28046 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657236.348:4247019): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe5e113ff0 a2=7ffe5e113ff0 a3=fffffc00 items=0 ppid=5547 pid=28046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657236.348:4247019): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674657238.031:4247020): pid=28056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657238.031:4247021): pid=28056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657238.031:4247022): pid=28056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28056 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657238.371:4247023): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28056 suid=74 rport=44216 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657238.372:4247024): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28056 suid=74 rport=44216 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=? res=success'
type=USER_AUTH msg=audit(1674657239.453:4247025): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=212.33.201.52 addr=212.33.201.52 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657241.413:4247026): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657241.629:4247027): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28056 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657241.629:4247028): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28056 suid=74 rport=44216 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657241.632:4247029): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657241.632:4247030): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657241.632:4247031): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28055 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657241.632:4247032): pid=28055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=212.33.201.52 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674657241.764:4247033): pid=28071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657241.764:4247034): pid=28071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657241.764:4247035): pid=28071 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257965 res=1
type=USER_START msg=audit(1674657241.779:4247036): pid=28071 uid=0 auid=1055 ses=257965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657241.781:4247037): pid=28071 uid=0 auid=1055 ses=257965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657242.068:4247038): pid=28071 uid=0 auid=1055 ses=257965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657242.070:4247039): pid=28071 uid=0 auid=1055 ses=257965 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674657243.947:4247040): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674657243.947:4247040): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f464ccce010 items=0 ppid=28092 pid=28095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657243.947:4247040): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674657243.952:4247041): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674657243.952:4247041): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc6b3f42010 items=0 ppid=28092 pid=28096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657243.952:4247041): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674657243.957:4247042): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674657243.957:4247042): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8efdb18010 items=0 ppid=28092 pid=28097 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657243.957:4247042): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674657243.962:4247043): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674657243.962:4247043): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f179987f010 items=0 ppid=28092 pid=28098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657243.962:4247043): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674657244.310:4247044): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674657244.310:4247044): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9514bb6010 items=0 ppid=28092 pid=28107 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657244.310:4247044): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138352E3135312E33322E37002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674657244.317:4247045): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674657244.317:4247045): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7950da6010 items=0 ppid=28092 pid=28108 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657244.317:4247045): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138352E3135312E33322E37002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674657244.326:4247046): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674657244.326:4247046): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fba59287010 items=0 ppid=28092 pid=28109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657244.326:4247046): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003231322E33332E3230312E3532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674657244.335:4247047): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674657244.335:4247047): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4d0dd6d010 items=0 ppid=28092 pid=28110 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657244.335:4247047): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003231322E33332E3230312E3532002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674657260.049:4247048): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657260.049:4247049): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657260.049:4247050): pid=28163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28163 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657260.173:4247051): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28163 suid=74 rport=11471 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657260.173:4247052): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28163 suid=74 rport=11471 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=? res=success'
type=USER_AUTH msg=audit(1674657260.831:4247053): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=183.180.128.204 addr=183.180.128.204 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657262.676:4247054): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657262.803:4247055): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28163 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657262.803:4247056): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28163 suid=74 rport=11471 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657262.805:4247057): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657262.805:4247058): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657262.805:4247059): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657262.805:4247060): pid=28162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.180.128.204 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674657264.058:4247061): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674657264.058:4247061): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8334ef9010 items=0 ppid=28180 pid=28183 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657264.058:4247061): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674657264.064:4247062): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674657264.064:4247062): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1b3abd6010 items=0 ppid=28180 pid=28184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657264.064:4247062): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674657264.069:4247063): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674657264.069:4247063): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb14c545010 items=0 ppid=28180 pid=28185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657264.069:4247063): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674657264.075:4247064): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674657264.075:4247064): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7a04af2010 items=0 ppid=28180 pid=28186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657264.075:4247064): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674657264.381:4247065): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674657264.381:4247065): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa492dfd010 items=0 ppid=28180 pid=28195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657264.381:4247065): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003137372E34352E37392E3431002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674657264.390:4247066): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674657264.390:4247066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f01dc58e010 items=0 ppid=28180 pid=28196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657264.390:4247066): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003137372E34352E37392E3431002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674657264.398:4247067): table=filter family=2 entries=1028
type=SYSCALL msg=audit(1674657264.398:4247067): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0bbf4aa010 items=0 ppid=28180 pid=28197 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657264.398:4247067): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138332E3138302E3132382E323034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674657264.407:4247068): table=filter family=2 entries=1029
type=SYSCALL msg=audit(1674657264.407:4247068): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fea5286d010 items=0 ppid=28180 pid=28198 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657264.407:4247068): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138332E3138302E3132382E323034002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674657286.772:4247069): avc: denied { name_connect } for pid=28046 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657286.772:4247069): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffe5e113de0 a2=10 a3=7ffe5e113ddc items=0 ppid=5547 pid=28046 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657286.772:4247069): proctitle="dovecot/auth"
type=AVC msg=audit(1674657286.788:4247070): avc: denied { write } for pid=28048 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657286.788:4247070): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff61c029a0 a2=6e a3=63d13e06 items=0 ppid=5547 pid=28048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657286.788:4247070): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674657301.086:4247071): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657301.086:4247072): pid=28329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657301.086:4247073): pid=28327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657301.086:4247074): pid=28328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657301.086:4247075): pid=28330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657301.086:4247076): pid=28329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657301.087:4247077): pid=28327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657301.087:4247078): pid=28328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657301.088:4247079): pid=28329 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257966 res=1
type=LOGIN msg=audit(1674657301.088:4247080): pid=28327 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257967 res=1
type=LOGIN msg=audit(1674657301.088:4247081): pid=28328 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257968 res=1
type=LOGIN msg=audit(1674657301.088:4247082): pid=28330 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257969 res=1
type=USER_START msg=audit(1674657301.143:4247084): pid=28329 uid=0 auid=0 ses=257966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657301.143:4247083): pid=28327 uid=0 auid=0 ses=257967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657301.143:4247085): pid=28330 uid=0 auid=1055 ses=257969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657301.144:4247086): pid=28328 uid=0 auid=0 ses=257968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657301.145:4247087): pid=28330 uid=0 auid=1055 ses=257969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657301.145:4247088): pid=28327 uid=0 auid=0 ses=257967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657301.146:4247089): pid=28329 uid=0 auid=0 ses=257966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657301.146:4247090): pid=28328 uid=0 auid=0 ses=257968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657301.228:4247091): pid=28328 uid=0 auid=0 ses=257968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657301.232:4247092): pid=28328 uid=0 auid=0 ses=257968 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657301.266:4247093): pid=28329 uid=0 auid=0 ses=257966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657301.270:4247094): pid=28329 uid=0 auid=0 ses=257966 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657301.443:4247095): pid=28330 uid=0 auid=1055 ses=257969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657301.445:4247096): pid=28330 uid=0 auid=1055 ses=257969 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657304.488:4247097): pid=28327 uid=0 auid=0 ses=257967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657304.489:4247098): pid=28327 uid=0 auid=0 ses=257967 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674657320.282:4247099): avc: denied { write } for pid=28048 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657320.282:4247099): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff61c029a0 a2=6e a3=63d13e28 items=0 ppid=5547 pid=28048 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657320.282:4247099): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674657361.510:4247100): pid=28559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657361.510:4247101): pid=28559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657361.510:4247102): pid=28559 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257970 res=1
type=USER_START msg=audit(1674657361.531:4247103): pid=28559 uid=0 auid=1055 ses=257970 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657361.534:4247104): pid=28559 uid=0 auid=1055 ses=257970 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657361.895:4247105): pid=28559 uid=0 auid=1055 ses=257970 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657361.897:4247106): pid=28559 uid=0 auid=1055 ses=257970 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674657402.163:4247107): avc: denied { read } for pid=28730 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674657402.163:4247107): avc: denied { open } for pid=28730 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657402.163:4247107): arch=c000003e syscall=2 success=yes exit=18 a0=55a3ad665f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=28730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657402.163:4247107): proctitle="dovecot/auth"
type=AVC msg=audit(1674657402.163:4247108): avc: denied { getattr } for pid=28730 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657402.163:4247108): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdf9f1d130 a2=7ffdf9f1d130 a3=fffffc00 items=0 ppid=5547 pid=28730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657402.163:4247108): proctitle="dovecot/auth"
type=AVC msg=audit(1674657402.682:4247109): avc: denied { name_connect } for pid=28730 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657402.682:4247109): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffdf9f1cf20 a2=10 a3=7ffdf9f1cf1c items=0 ppid=5547 pid=28730 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657402.682:4247109): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674657421.914:4247110): pid=28868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657421.914:4247111): pid=28868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657421.915:4247112): pid=28868 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257971 res=1
type=USER_START msg=audit(1674657421.931:4247113): pid=28868 uid=0 auid=1055 ses=257971 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657421.933:4247114): pid=28868 uid=0 auid=1055 ses=257971 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657422.250:4247115): pid=28868 uid=0 auid=1055 ses=257971 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657422.253:4247116): pid=28868 uid=0 auid=1055 ses=257971 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674657446.293:4247117): table=filter family=2 entries=1030
type=SYSCALL msg=audit(1674657446.293:4247117): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b3b5da24010 items=0 ppid=28968 pid=28973 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657446.293:4247117): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232312E332E3231322E323534002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674657471.147:4247118): avc: denied { name_connect } for pid=28730 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657471.147:4247118): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdf9f1cf20 a2=10 a3=7ffdf9f1cf1c items=0 ppid=5547 pid=28730 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657471.147:4247118): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674657472.241:4247119): table=filter family=2 entries=1031
type=SYSCALL msg=audit(1674657472.241:4247119): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af229797010 items=0 ppid=29047 pid=29052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657472.241:4247119): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138332E32302E38352E3838002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543134
type=CRYPTO_KEY_USER msg=audit(1674657477.120:4247120): pid=29064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657477.120:4247121): pid=29064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657477.120:4247122): pid=29064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657477.303:4247123): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29064 suid=74 rport=60166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=122.22.197.22 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657477.304:4247124): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29064 suid=74 rport=60166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=122.22.197.22 terminal=? res=success'
type=USER_AUTH msg=audit(1674657478.145:4247125): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=122.22.197.22 addr=122.22.197.22 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657479.915:4247126): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=122.22.197.22 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657480.095:4247127): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29064 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657480.095:4247128): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29064 suid=74 rport=60166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=122.22.197.22 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657480.097:4247129): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657480.097:4247130): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657480.097:4247131): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657480.097:4247132): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=122.22.197.22 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674657481.273:4247133): pid=29080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657481.273:4247134): pid=29080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657481.273:4247135): pid=29080 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257972 res=1
type=USER_START msg=audit(1674657481.290:4247136): pid=29080 uid=0 auid=1055 ses=257972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657481.293:4247137): pid=29080 uid=0 auid=1055 ses=257972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657481.552:4247138): pid=29080 uid=0 auid=1055 ses=257972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657481.561:4247139): pid=29080 uid=0 auid=1055 ses=257972 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674657495.147:4247140): avc: denied { write } for pid=29134 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657495.147:4247140): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe13fe43c0 a2=6e a3=63d13ed7 items=0 ppid=5547 pid=29134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657495.147:4247140): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674657541.579:4247141): pid=29274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657541.579:4247142): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657541.579:4247143): pid=29274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657541.580:4247144): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657541.580:4247145): pid=29274 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257973 res=1
type=LOGIN msg=audit(1674657541.580:4247146): pid=29275 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257974 res=1
type=USER_START msg=audit(1674657541.617:4247147): pid=29275 uid=0 auid=1055 ses=257974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657541.618:4247148): pid=29274 uid=0 auid=0 ses=257973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657541.618:4247149): pid=29275 uid=0 auid=1055 ses=257974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657541.619:4247150): pid=29274 uid=0 auid=0 ses=257973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657541.989:4247151): pid=29275 uid=0 auid=1055 ses=257974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657541.992:4247152): pid=29275 uid=0 auid=1055 ses=257974 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657543.126:4247153): pid=29274 uid=0 auid=0 ses=257973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657543.129:4247154): pid=29274 uid=0 auid=0 ses=257973 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674657590.884:4247155): avc: denied { read } for pid=29465 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674657590.884:4247155): avc: denied { open } for pid=29465 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657590.884:4247155): arch=c000003e syscall=2 success=yes exit=18 a0=5608041bcf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=29465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657590.884:4247155): proctitle="dovecot/auth"
type=AVC msg=audit(1674657590.885:4247156): avc: denied { getattr } for pid=29465 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657590.885:4247156): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffa7a14180 a2=7fffa7a14180 a3=fffffc00 items=0 ppid=5547 pid=29465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657590.885:4247156): proctitle="dovecot/auth"
type=AVC msg=audit(1674657593.283:4247157): avc: denied { name_connect } for pid=29465 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657593.283:4247157): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffa7a13f70 a2=10 a3=7fffa7a13f6c items=0 ppid=5547 pid=29465 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657593.283:4247157): proctitle="dovecot/auth"
type=AVC msg=audit(1674657593.311:4247158): avc: denied { write } for pid=29473 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657593.311:4247158): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff6bb72740 a2=6e a3=63d13f39 items=0 ppid=5547 pid=29473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657593.311:4247158): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674657601.144:4247159): pid=29503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657601.144:4247160): pid=29501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657601.144:4247161): pid=29503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657601.144:4247162): pid=29501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657601.144:4247163): pid=29503 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257975 res=1
type=LOGIN msg=audit(1674657601.144:4247164): pid=29501 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257976 res=1
type=USER_ACCT msg=audit(1674657601.144:4247165): pid=29502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657601.145:4247166): pid=29502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657601.145:4247167): pid=29502 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257977 res=1
type=USER_START msg=audit(1674657601.187:4247168): pid=29502 uid=0 auid=0 ses=257977 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657601.187:4247169): pid=29501 uid=0 auid=0 ses=257976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657601.188:4247170): pid=29503 uid=0 auid=1055 ses=257975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657601.188:4247171): pid=29502 uid=0 auid=0 ses=257977 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657601.189:4247172): pid=29501 uid=0 auid=0 ses=257976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657601.189:4247173): pid=29503 uid=0 auid=1055 ses=257975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657601.216:4247174): pid=29501 uid=0 auid=0 ses=257976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657601.218:4247175): pid=29501 uid=0 auid=0 ses=257976 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657601.547:4247176): pid=29503 uid=0 auid=1055 ses=257975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657601.553:4247177): pid=29503 uid=0 auid=1055 ses=257975 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657604.613:4247178): pid=29502 uid=0 auid=0 ses=257977 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657604.616:4247179): pid=29502 uid=0 auid=0 ses=257977 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674657648.269:4247180): pid=29678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657648.270:4247181): pid=29678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657648.270:4247182): pid=29678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657648.398:4247183): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29678 suid=74 rport=34190 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.253.244.170 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657648.398:4247184): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29678 suid=74 rport=34190 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.253.244.170 terminal=? res=success'
type=USER_AUTH msg=audit(1674657649.069:4247185): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=5.253.244.170 addr=5.253.244.170 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657651.316:4247186): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=5.253.244.170 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657651.447:4247187): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29678 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657651.447:4247188): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29678 suid=74 rport=34190 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.253.244.170 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657651.449:4247189): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657651.449:4247190): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657651.449:4247191): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657651.449:4247192): pid=29677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=5.253.244.170 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674657661.634:4247193): pid=29712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657661.634:4247194): pid=29712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657661.635:4247195): pid=29712 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257978 res=1
type=USER_START msg=audit(1674657661.652:4247196): pid=29712 uid=0 auid=1055 ses=257978 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657661.654:4247197): pid=29712 uid=0 auid=1055 ses=257978 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657661.894:4247198): pid=29712 uid=0 auid=1055 ses=257978 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657661.896:4247199): pid=29712 uid=0 auid=1055 ses=257978 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674657664.543:4247200): avc: denied { name_connect } for pid=29465 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657664.543:4247200): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffa7a13f70 a2=10 a3=7fffa7a13f6c items=0 ppid=5547 pid=29465 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657664.543:4247200): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674657665.623:4247201): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674657665.623:4247201): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b4d90da1010 items=0 ppid=29731 pid=29736 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657665.623:4247201): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034332E3133382E3139302E323337002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674657682.404:4247202): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674657682.404:4247202): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ac9bbba9010 items=0 ppid=29785 pid=29790 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657682.404:4247202): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E34322E3234352E313533002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674657704.623:4247203): avc: denied { write } for pid=29919 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657704.623:4247203): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc3fc17f60 a2=6e a3=63d13fa8 items=0 ppid=5547 pid=29919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657704.623:4247203): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674657721.918:4247204): pid=30015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657721.919:4247205): pid=30015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657721.920:4247206): pid=30015 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257979 res=1
type=USER_START msg=audit(1674657721.936:4247207): pid=30015 uid=0 auid=1055 ses=257979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657721.938:4247208): pid=30015 uid=0 auid=1055 ses=257979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674657722.085:4247209): avc: denied { name_connect } for pid=29465 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657722.085:4247209): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fffa7a13f70 a2=10 a3=7fffa7a13f6c items=0 ppid=5547 pid=29465 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657722.085:4247209): proctitle="dovecot/auth"
type=AVC msg=audit(1674657722.098:4247210): avc: denied { write } for pid=29919 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657722.098:4247210): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc3fc17f60 a2=6e a3=63d13fba items=0 ppid=5547 pid=29919 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657722.098:4247210): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674657722.264:4247211): pid=30015 uid=0 auid=1055 ses=257979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657722.266:4247212): pid=30015 uid=0 auid=1055 ses=257979 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657781.280:4247213): pid=30203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657781.280:4247214): pid=30204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657781.280:4247215): pid=30203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657781.280:4247216): pid=30204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657781.280:4247218): pid=30204 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257980 res=1
type=LOGIN msg=audit(1674657781.280:4247217): pid=30203 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257981 res=1
type=USER_START msg=audit(1674657781.305:4247219): pid=30203 uid=0 auid=0 ses=257981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657781.305:4247220): pid=30204 uid=0 auid=1055 ses=257980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657781.306:4247221): pid=30204 uid=0 auid=1055 ses=257980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657781.307:4247222): pid=30203 uid=0 auid=0 ses=257981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657781.349:4247223): pid=30203 uid=0 auid=0 ses=257981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657781.351:4247224): pid=30203 uid=0 auid=0 ses=257981 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657781.549:4247225): pid=30204 uid=0 auid=1055 ses=257980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657781.552:4247226): pid=30204 uid=0 auid=1055 ses=257980 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657841.569:4247227): pid=30390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657841.569:4247228): pid=30390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657841.571:4247229): pid=30390 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257982 res=1
type=USER_START msg=audit(1674657841.585:4247230): pid=30390 uid=0 auid=1055 ses=257982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657841.587:4247231): pid=30390 uid=0 auid=1055 ses=257982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657841.922:4247232): pid=30390 uid=0 auid=1055 ses=257982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657841.924:4247233): pid=30390 uid=0 auid=1055 ses=257982 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674657842.476:4247234): pid=30406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657842.477:4247235): pid=30406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657842.477:4247236): pid=30406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30406 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657842.609:4247237): pid=30405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30406 suid=74 rport=51916 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.253.244.170 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657842.609:4247238): pid=30405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30406 suid=74 rport=51916 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=5.253.244.170 terminal=? res=success'
type=USER_AUTH msg=audit(1674657843.258:4247239): pid=30405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=5.253.244.170 addr=5.253.244.170 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674657845.022:4247240): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674657845.022:4247240): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7febc7ea6010 items=0 ppid=30419 pid=30422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657845.022:4247240): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674657845.026:4247241): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674657845.026:4247241): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc29e043010 items=0 ppid=30419 pid=30423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657845.026:4247241): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674657845.030:4247242): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674657845.030:4247242): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f814eabe010 items=0 ppid=30419 pid=30424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657845.030:4247242): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674657845.034:4247243): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674657845.034:4247243): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb8193ab010 items=0 ppid=30419 pid=30425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657845.034:4247243): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674657845.335:4247244): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674657845.335:4247244): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f76931d8010 items=0 ppid=30419 pid=30433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657845.335:4247244): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003130342E3232312E3234322E313532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674657845.341:4247245): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674657845.341:4247245): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe698e96010 items=0 ppid=30419 pid=30434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657845.341:4247245): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003130342E3232312E3234322E313532002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674657845.347:4247246): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674657845.347:4247246): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2c51970010 items=0 ppid=30419 pid=30435 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657845.347:4247246): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D7300352E3235332E3234342E313730002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674657845.352:4247247): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674657845.352:4247247): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0fa613d010 items=0 ppid=30419 pid=30436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657845.352:4247247): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D6400352E3235332E3234342E313730002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674657845.467:4247248): pid=30405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=5.253.244.170 terminal=ssh res=failed'
type=AVC msg=audit(1674657884.433:4247249): avc: denied { read } for pid=30587 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674657884.433:4247249): avc: denied { open } for pid=30587 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657884.433:4247249): arch=c000003e syscall=2 success=yes exit=18 a0=55b86c1b6f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657884.433:4247249): proctitle="dovecot/auth"
type=AVC msg=audit(1674657884.433:4247250): avc: denied { getattr } for pid=30587 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657884.433:4247250): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffaf5af320 a2=7fffaf5af320 a3=fffffc00 items=0 ppid=5547 pid=30587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657884.433:4247250): proctitle="dovecot/auth"
type=AVC msg=audit(1674657885.764:4247251): avc: denied { write } for pid=30594 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657885.764:4247251): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe8a292860 a2=6e a3=63d1405d items=0 ppid=5547 pid=30594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657885.764:4247251): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674657886.403:4247252): avc: denied { read append } for pid=30596 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674657886.403:4247252): avc: denied { open } for pid=30596 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657886.403:4247252): arch=c000003e syscall=2 success=yes exit=8 a0=55d1d94b2a60 a1=402 a2=7ffc192cbc20 a3=7ffc192cb6a0 items=0 ppid=5547 pid=30596 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657886.403:4247252): proctitle="dovecot/imap"
type=AVC msg=audit(1674657886.403:4247253): avc: denied { getattr } for pid=30596 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657886.403:4247253): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc192cbb80 a2=7ffc192cbb80 a3=7ffc192cb5e0 items=0 ppid=5547 pid=30596 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657886.403:4247253): proctitle="dovecot/imap"
type=AVC msg=audit(1674657886.403:4247254): avc: denied { write } for pid=30596 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657886.403:4247254): arch=c000003e syscall=2 success=yes exit=10 a0=55d1d94b7990 a1=2 a2=7ffc192cb920 a3=7ffc192cb3e0 items=0 ppid=5547 pid=30596 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657886.403:4247254): proctitle="dovecot/imap"
type=AVC msg=audit(1674657886.403:4247255): avc: denied { lock } for pid=30596 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657886.403:4247255): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc192cb820 a3=63d1405e items=0 ppid=5547 pid=30596 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657886.403:4247255): proctitle="dovecot/imap"
type=AVC msg=audit(1674657886.404:4247256): avc: denied { read } for pid=30596 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674657886.404:4247256): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55d1d94e0300 a2=90800 a3=0 items=0 ppid=5547 pid=30596 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657886.404:4247256): proctitle="dovecot/imap"
type=AVC msg=audit(1674657886.404:4247257): avc: denied { getattr } for pid=30596 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674657886.404:4247257): arch=c000003e syscall=4 success=yes exit=0 a0=55d1d94a2a60 a1=7ffc192cbbd0 a2=7ffc192cbbd0 a3=6f632e6f72676173 items=0 ppid=5547 pid=30596 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657886.404:4247257): proctitle="dovecot/imap"
type=AVC msg=audit(1674657888.095:4247258): avc: denied { write } for pid=30601 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674657888.095:4247258): arch=c000003e syscall=21 success=yes exit=0 a0=55acac1a54c0 a1=2 a2=7b48 a3=7ffea4bac120 items=0 ppid=5547 pid=30601 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657888.095:4247258): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674657901.956:4247259): pid=30647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674657901.956:4247260): pid=30648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657901.958:4247261): pid=30648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657901.958:4247262): pid=30647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657901.958:4247263): pid=30647 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257983 res=1
type=LOGIN msg=audit(1674657901.958:4247264): pid=30648 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257984 res=1
type=USER_START msg=audit(1674657902.008:4247265): pid=30648 uid=0 auid=1055 ses=257984 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674657902.008:4247266): pid=30647 uid=0 auid=0 ses=257983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657902.008:4247267): pid=30648 uid=0 auid=1055 ses=257984 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657902.014:4247268): pid=30647 uid=0 auid=0 ses=257983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657902.403:4247269): pid=30648 uid=0 auid=1055 ses=257984 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657902.408:4247270): pid=30648 uid=0 auid=1055 ses=257984 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674657903.098:4247271): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674657903.098:4247271): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b44745c2010 items=0 ppid=30668 pid=30673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657903.098:4247271): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132302E37312E3232342E3932002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=NETFILTER_CFG msg=audit(1674657904.205:4247272): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674657904.205:4247272): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2abab2d8b010 items=0 ppid=30678 pid=30683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657904.205:4247272): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132302E37312E3232342E3932002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=CRED_DISP msg=audit(1674657905.444:4247273): pid=30647 uid=0 auid=0 ses=257983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657905.446:4247274): pid=30647 uid=0 auid=0 ses=257983 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674657940.219:4247275): pid=30804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657940.219:4247276): pid=30804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657940.219:4247277): pid=30804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657940.439:4247278): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30804 suid=74 rport=51444 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657940.439:4247279): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=30804 suid=74 rport=51444 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=? res=success'
type=USER_AUTH msg=audit(1674657941.446:4247280): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.153.104.207 addr=43.153.104.207 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657943.110:4247281): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657943.331:4247282): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30804 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657943.331:4247283): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30804 suid=74 rport=51444 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657943.332:4247284): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657943.333:4247285): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657943.333:4247286): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30803 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657943.333:4247287): pid=30803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674657961.474:4247288): pid=30869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674657961.474:4247289): pid=30869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674657961.476:4247290): pid=30869 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257985 res=1
type=USER_START msg=audit(1674657961.500:4247291): pid=30869 uid=0 auid=1055 ses=257985 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674657961.500:4247292): pid=30869 uid=0 auid=1055 ses=257985 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674657961.945:4247293): pid=30869 uid=0 auid=1055 ses=257985 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674657961.949:4247294): pid=30869 uid=0 auid=1055 ses=257985 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674657982.659:4247295): avc: denied { name_connect } for pid=30587 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674657982.659:4247295): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffaf5af110 a2=10 a3=7fffaf5af10c items=0 ppid=5547 pid=30587 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657982.659:4247295): proctitle="dovecot/auth"
type=AVC msg=audit(1674657982.693:4247296): avc: denied { write } for pid=30934 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674657982.693:4247296): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffde8d1e910 a2=6e a3=63d140be items=0 ppid=5547 pid=30934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674657982.693:4247296): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674657996.780:4247297): pid=30995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657996.781:4247298): pid=30995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657996.781:4247299): pid=30995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30995 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657996.952:4247300): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=30995 suid=74 rport=25883 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674657996.952:4247301): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=30995 suid=74 rport=25883 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=USER_AUTH msg=audit(1674657997.701:4247302): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=62.233.50.248 addr=62.233.50.248 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674657999.721:4247303): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674657999.896:4247304): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30995 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657999.896:4247305): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=30995 suid=74 rport=25883 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657999.897:4247306): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=30994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657999.897:4247307): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=30994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674657999.897:4247308): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=30994 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674657999.897:4247309): pid=30994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674658021.980:4247310): pid=31179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658021.981:4247311): pid=31179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658021.982:4247312): pid=31179 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257986 res=1
type=USER_START msg=audit(1674658022.008:4247313): pid=31179 uid=0 auid=1055 ses=257986 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658022.010:4247314): pid=31179 uid=0 auid=1055 ses=257986 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658022.398:4247315): pid=31179 uid=0 auid=1055 ses=257986 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658022.400:4247316): pid=31179 uid=0 auid=1055 ses=257986 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658081.414:4247317): pid=31371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658081.415:4247318): pid=31371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658081.415:4247319): pid=31371 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257987 res=1
type=USER_START msg=audit(1674658081.430:4247320): pid=31371 uid=0 auid=1055 ses=257987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658081.432:4247321): pid=31371 uid=0 auid=1055 ses=257987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658081.671:4247322): pid=31371 uid=0 auid=1055 ses=257987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658081.672:4247323): pid=31371 uid=0 auid=1055 ses=257987 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674658134.762:4247324): avc: denied { name_connect } for pid=30587 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674658134.762:4247324): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffaf5af110 a2=10 a3=7fffaf5af10c items=0 ppid=5547 pid=30587 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658134.762:4247324): proctitle="dovecot/auth"
type=AVC msg=audit(1674658134.804:4247325): avc: denied { write } for pid=31544 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674658134.804:4247325): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe135c7780 a2=6e a3=63d14156 items=0 ppid=5547 pid=31544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658134.804:4247325): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674658141.686:4247326): pid=31563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658141.686:4247327): pid=31563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658141.686:4247328): pid=31563 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257988 res=1
type=USER_START msg=audit(1674658141.698:4247329): pid=31563 uid=0 auid=1055 ses=257988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658141.701:4247330): pid=31563 uid=0 auid=1055 ses=257988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658141.989:4247331): pid=31563 uid=0 auid=1055 ses=257988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658141.991:4247332): pid=31563 uid=0 auid=1055 ses=257988 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674658148.873:4247333): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674658148.873:4247333): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b90e8caa010 items=0 ppid=31592 pid=31598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658148.873:4247333): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E362E3232322E313634002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674658202.009:4247334): pid=31756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658202.009:4247335): pid=31756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658202.009:4247336): pid=31757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658202.009:4247337): pid=31756 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257989 res=1
type=CRED_ACQ msg=audit(1674658202.009:4247338): pid=31757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658202.009:4247339): pid=31757 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257990 res=1
type=USER_ACCT msg=audit(1674658202.025:4247340): pid=31758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658202.025:4247341): pid=31758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658202.027:4247342): pid=31758 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257991 res=1
type=USER_ACCT msg=audit(1674658202.045:4247343): pid=31755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658202.045:4247344): pid=31755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658202.045:4247345): pid=31755 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257992 res=1
type=USER_START msg=audit(1674658202.111:4247346): pid=31757 uid=0 auid=0 ses=257990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674658202.113:4247347): pid=31758 uid=0 auid=1055 ses=257991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674658202.113:4247348): pid=31756 uid=0 auid=0 ses=257989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674658202.114:4247349): pid=31755 uid=0 auid=0 ses=257992 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658202.114:4247350): pid=31758 uid=0 auid=1055 ses=257991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658202.114:4247351): pid=31757 uid=0 auid=0 ses=257990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658202.114:4247352): pid=31756 uid=0 auid=0 ses=257989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658202.115:4247353): pid=31755 uid=0 auid=0 ses=257992 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658202.160:4247354): pid=31755 uid=0 auid=0 ses=257992 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658202.163:4247355): pid=31755 uid=0 auid=0 ses=257992 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658202.226:4247356): pid=31757 uid=0 auid=0 ses=257990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658202.242:4247357): pid=31757 uid=0 auid=0 ses=257990 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658202.557:4247358): pid=31758 uid=0 auid=1055 ses=257991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658202.560:4247359): pid=31758 uid=0 auid=1055 ses=257991 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658205.555:4247360): pid=31756 uid=0 auid=0 ses=257989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658205.557:4247361): pid=31756 uid=0 auid=0 ses=257989 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674658213.241:4247362): pid=31814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658213.241:4247363): pid=31814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658213.241:4247364): pid=31814 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31814 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674658213.469:4247365): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31814 suid=74 rport=58378 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674658213.470:4247366): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31814 suid=74 rport=58378 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=? res=success'
type=USER_AUTH msg=audit(1674658214.491:4247367): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.153.104.207 addr=43.153.104.207 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674658215.970:4247368): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674658216.198:4247369): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31814 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658216.198:4247370): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31814 suid=74 rport=58378 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658216.200:4247371): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658216.200:4247372): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658216.200:4247373): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31813 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674658216.200:4247374): pid=31813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.153.104.207 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674658219.481:4247375): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674658219.481:4247375): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3b2d337010 items=0 ppid=31837 pid=31843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658219.481:4247375): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674658219.486:4247376): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674658219.486:4247376): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7faf0ac60010 items=0 ppid=31837 pid=31844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658219.486:4247376): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674658219.491:4247377): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674658219.491:4247377): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f16a0920010 items=0 ppid=31837 pid=31845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658219.491:4247377): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674658219.496:4247378): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674658219.496:4247378): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f09ec4a9010 items=0 ppid=31837 pid=31846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658219.496:4247378): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674658219.928:4247379): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674658219.928:4247379): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f25bc5f6010 items=0 ppid=31837 pid=31854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658219.928:4247379): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138352E3232352E37332E313336002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674658219.934:4247380): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674658219.934:4247380): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2f61307010 items=0 ppid=31837 pid=31855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658219.934:4247380): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138352E3232352E37332E313336002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674658219.941:4247381): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674658219.941:4247381): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f92e813d010 items=0 ppid=31837 pid=31856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658219.941:4247381): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034332E3135332E3130342E323037002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674658219.948:4247382): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674658219.948:4247382): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4c0760b010 items=0 ppid=31837 pid=31857 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658219.948:4247382): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034332E3135332E3130342E323037002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674658260.688:4247383): avc: denied { name_connect } for pid=30587 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674658260.688:4247383): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7fffaf5af110 a2=10 a3=7fffaf5af10c items=0 ppid=5547 pid=30587 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658260.688:4247383): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674658261.579:4247384): pid=32001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658261.580:4247385): pid=32001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658261.581:4247386): pid=32001 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257993 res=1
type=USER_START msg=audit(1674658261.599:4247387): pid=32001 uid=0 auid=1055 ses=257993 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658261.601:4247388): pid=32001 uid=0 auid=1055 ses=257993 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658261.966:4247389): pid=32001 uid=0 auid=1055 ses=257993 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658261.968:4247390): pid=32001 uid=0 auid=1055 ses=257993 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674658268.833:4247391): pid=32037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658268.834:4247392): pid=32037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658268.834:4247393): pid=32037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32037 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674658269.060:4247394): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=32037 suid=74 rport=63292 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=221.158.71.225 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674658269.061:4247395): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=32037 suid=74 rport=63292 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=221.158.71.225 terminal=? res=success'
type=USER_AUTH msg=audit(1674658270.556:4247396): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=221.158.71.225 addr=221.158.71.225 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674658272.721:4247397): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.158.71.225 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674658273.405:4247398): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32037 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658273.405:4247399): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32037 suid=74 rport=63292 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=221.158.71.225 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658273.407:4247400): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658273.407:4247401): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674658273.407:4247402): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32031 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674658273.407:4247403): pid=32031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=221.158.71.225 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674658321.985:4247404): pid=32203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658321.985:4247405): pid=32203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658321.985:4247406): pid=32203 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257994 res=1
type=USER_START msg=audit(1674658322.002:4247407): pid=32203 uid=0 auid=1055 ses=257994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658322.004:4247408): pid=32203 uid=0 auid=1055 ses=257994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658322.330:4247409): pid=32203 uid=0 auid=1055 ses=257994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658322.332:4247410): pid=32203 uid=0 auid=1055 ses=257994 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674658337.264:4247411): avc: denied { name_connect } for pid=30587 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674658337.264:4247411): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7fffaf5af110 a2=10 a3=7fffaf5af10c items=0 ppid=5547 pid=30587 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658337.264:4247411): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674658381.351:4247412): pid=32526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658381.351:4247413): pid=32526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658381.352:4247414): pid=32526 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257995 res=1
type=USER_START msg=audit(1674658381.370:4247415): pid=32526 uid=0 auid=1055 ses=257995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658381.371:4247416): pid=32526 uid=0 auid=1055 ses=257995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658381.650:4247417): pid=32526 uid=0 auid=1055 ses=257995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658381.652:4247418): pid=32526 uid=0 auid=1055 ses=257995 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658441.667:4247419): pid=32715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658441.667:4247420): pid=32715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658441.668:4247421): pid=32715 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257996 res=1
type=USER_START msg=audit(1674658441.682:4247422): pid=32715 uid=0 auid=1055 ses=257996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658441.683:4247423): pid=32715 uid=0 auid=1055 ses=257996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658441.936:4247424): pid=32715 uid=0 auid=1055 ses=257996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658441.938:4247425): pid=32715 uid=0 auid=1055 ses=257996 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658501.954:4247426): pid=450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658501.954:4247427): pid=450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658501.954:4247428): pid=450 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257997 res=1
type=USER_ACCT msg=audit(1674658501.957:4247429): pid=451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658501.957:4247430): pid=451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658501.957:4247431): pid=451 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257998 res=1
type=USER_START msg=audit(1674658502.052:4247432): pid=450 uid=0 auid=0 ses=257997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658502.057:4247433): pid=450 uid=0 auid=0 ses=257997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674658502.075:4247434): pid=451 uid=0 auid=1055 ses=257998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658502.078:4247435): pid=451 uid=0 auid=1055 ses=257998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658502.457:4247436): pid=451 uid=0 auid=1055 ses=257998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658502.462:4247437): pid=451 uid=0 auid=1055 ses=257998 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658505.500:4247438): pid=450 uid=0 auid=0 ses=257997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658505.503:4247439): pid=450 uid=0 auid=0 ses=257997 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674658511.042:4247440): avc: denied { read } for pid=492 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674658511.042:4247440): avc: denied { open } for pid=492 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658511.042:4247440): arch=c000003e syscall=2 success=yes exit=18 a0=56271389cf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658511.042:4247440): proctitle="dovecot/auth"
type=AVC msg=audit(1674658511.042:4247441): avc: denied { getattr } for pid=492 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658511.042:4247441): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff1d455980 a2=7fff1d455980 a3=fffffc00 items=0 ppid=5547 pid=492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658511.042:4247441): proctitle="dovecot/auth"
type=AVC msg=audit(1674658512.515:4247442): avc: denied { name_connect } for pid=492 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674658512.515:4247442): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff1d455770 a2=10 a3=7fff1d45576c items=0 ppid=5547 pid=492 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658512.515:4247442): proctitle="dovecot/auth"
type=AVC msg=audit(1674658512.547:4247443): avc: denied { write } for pid=497 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674658512.547:4247443): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc2d7908c0 a2=6e a3=63d142d0 items=0 ppid=5547 pid=497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658512.547:4247443): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674658561.520:4247444): pid=739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658561.520:4247445): pid=739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658561.521:4247446): pid=739 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=257999 res=1
type=USER_START msg=audit(1674658561.544:4247447): pid=739 uid=0 auid=1055 ses=257999 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658561.546:4247448): pid=739 uid=0 auid=1055 ses=257999 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658561.892:4247449): pid=739 uid=0 auid=1055 ses=257999 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658561.895:4247450): pid=739 uid=0 auid=1055 ses=257999 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658621.912:4247451): pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658621.912:4247452): pid=940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658621.912:4247453): pid=940 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258000 res=1
type=USER_START msg=audit(1674658621.926:4247454): pid=940 uid=0 auid=1055 ses=258000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658621.927:4247455): pid=940 uid=0 auid=1055 ses=258000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658622.180:4247456): pid=940 uid=0 auid=1055 ses=258000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658622.182:4247457): pid=940 uid=0 auid=1055 ses=258000 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674658674.526:4247458): avc: denied { name_connect } for pid=1156 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674658674.526:4247458): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcdfeb29e0 a2=10 a3=7ffcdfeb29dc items=0 ppid=5547 pid=1156 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658674.526:4247458): proctitle="dovecot/auth"
type=AVC msg=audit(1674658674.565:4247459): avc: denied { write } for pid=1185 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674658674.565:4247459): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffff4e5160 a2=6e a3=63d14372 items=0 ppid=5547 pid=1185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658674.565:4247459): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674658681.198:4247461): pid=1260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658681.198:4247460): pid=1261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658681.198:4247462): pid=1261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658681.198:4247463): pid=1260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658681.198:4247464): pid=1261 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258001 res=1
type=LOGIN msg=audit(1674658681.198:4247465): pid=1260 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258002 res=1
type=USER_START msg=audit(1674658681.228:4247466): pid=1261 uid=0 auid=1055 ses=258001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674658681.228:4247467): pid=1260 uid=0 auid=0 ses=258002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658681.230:4247468): pid=1261 uid=0 auid=1055 ses=258001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658681.230:4247469): pid=1260 uid=0 auid=0 ses=258002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658681.294:4247470): pid=1260 uid=0 auid=0 ses=258002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658681.296:4247471): pid=1260 uid=0 auid=0 ses=258002 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658681.512:4247472): pid=1261 uid=0 auid=1055 ses=258001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658681.514:4247473): pid=1261 uid=0 auid=1055 ses=258001 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658741.543:4247474): pid=1475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658741.544:4247475): pid=1475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658741.545:4247476): pid=1475 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258003 res=1
type=USER_START msg=audit(1674658741.626:4247477): pid=1475 uid=0 auid=1055 ses=258003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658741.627:4247478): pid=1475 uid=0 auid=1055 ses=258003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658742.005:4247479): pid=1475 uid=0 auid=1055 ses=258003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658742.008:4247480): pid=1475 uid=0 auid=1055 ses=258003 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658801.024:4247481): pid=1710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658801.024:4247482): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658801.024:4247483): pid=1711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658801.024:4247484): pid=1710 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658801.024:4247485): pid=1712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658801.024:4247486): pid=1711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658801.024:4247487): pid=1712 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258004 res=1
type=LOGIN msg=audit(1674658801.024:4247488): pid=1710 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258005 res=1
type=LOGIN msg=audit(1674658801.024:4247489): pid=1711 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258006 res=1
type=USER_START msg=audit(1674658801.060:4247490): pid=1711 uid=0 auid=0 ses=258006 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674658801.060:4247491): pid=1712 uid=0 auid=1055 ses=258004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674658801.061:4247492): pid=1710 uid=0 auid=0 ses=258005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658801.061:4247493): pid=1711 uid=0 auid=0 ses=258006 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658801.062:4247494): pid=1712 uid=0 auid=1055 ses=258004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658801.062:4247495): pid=1710 uid=0 auid=0 ses=258005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658801.093:4247496): pid=1710 uid=0 auid=0 ses=258005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658801.097:4247497): pid=1710 uid=0 auid=0 ses=258005 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658801.319:4247498): pid=1712 uid=0 auid=1055 ses=258004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658801.322:4247499): pid=1712 uid=0 auid=1055 ses=258004 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674658801.748:4247500): avc: denied { name_connect } for pid=1156 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674658801.748:4247500): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcdfeb29e0 a2=10 a3=7ffcdfeb29dc items=0 ppid=5547 pid=1156 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658801.748:4247500): proctitle="dovecot/auth"
type=AVC msg=audit(1674658801.791:4247501): avc: denied { write } for pid=1564 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674658801.791:4247501): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffda6b1c9f0 a2=6e a3=63d143f1 items=0 ppid=5547 pid=1564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658801.791:4247501): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674658803.277:4247502): avc: denied { read append } for pid=1737 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674658803.277:4247502): avc: denied { open } for pid=1737 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658803.277:4247502): arch=c000003e syscall=2 success=yes exit=8 a0=5575948d5a60 a1=402 a2=7ffce0ed2df0 a3=7ffce0ed2860 items=0 ppid=5547 pid=1737 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658803.277:4247502): proctitle="dovecot/imap"
type=AVC msg=audit(1674658803.278:4247503): avc: denied { getattr } for pid=1737 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658803.278:4247503): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffce0ed2d50 a2=7ffce0ed2d50 a3=7ffce0ed27a0 items=0 ppid=5547 pid=1737 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658803.278:4247503): proctitle="dovecot/imap"
type=AVC msg=audit(1674658803.278:4247504): avc: denied { write } for pid=1737 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658803.278:4247504): arch=c000003e syscall=2 success=yes exit=10 a0=5575948da960 a1=2 a2=7ffce0ed2af0 a3=7ffce0ed25a0 items=0 ppid=5547 pid=1737 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658803.278:4247504): proctitle="dovecot/imap"
type=AVC msg=audit(1674658803.278:4247505): avc: denied { lock } for pid=1737 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658803.278:4247505): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffce0ed29f0 a3=63d143f3 items=0 ppid=5547 pid=1737 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658803.278:4247505): proctitle="dovecot/imap"
type=AVC msg=audit(1674658803.278:4247506): avc: denied { read } for pid=1737 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674658803.278:4247506): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5575949032f8 a2=90800 a3=0 items=0 ppid=5547 pid=1737 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658803.278:4247506): proctitle="dovecot/imap"
type=AVC msg=audit(1674658803.279:4247507): avc: denied { getattr } for pid=1737 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658803.279:4247507): arch=c000003e syscall=4 success=yes exit=0 a0=5575948c5a60 a1=7ffce0ed2da0 a2=7ffce0ed2da0 a3=6f632e6f72676173 items=0 ppid=5547 pid=1737 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658803.279:4247507): proctitle="dovecot/imap"
type=CRED_DISP msg=audit(1674658804.398:4247508): pid=1711 uid=0 auid=0 ses=258006 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658804.400:4247509): pid=1711 uid=0 auid=0 ses=258006 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674658804.964:4247510): avc: denied { write } for pid=1745 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674658804.964:4247510): arch=c000003e syscall=21 success=yes exit=0 a0=55e679fb14c0 a1=2 a2=7b48 a3=7ffc32086a20 items=0 ppid=5547 pid=1745 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658804.964:4247510): proctitle="dovecot/imap"
type=AVC msg=audit(1674658807.358:4247511): avc: denied { read } for pid=1752 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674658807.358:4247511): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55d7dcff72f8 a2=90800 a3=0 items=0 ppid=5547 pid=1752 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658807.358:4247511): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674658861.423:4247512): pid=1959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658861.423:4247513): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658861.423:4247514): pid=1959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658861.423:4247515): pid=1958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658861.425:4247516): pid=1958 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258007 res=1
type=LOGIN msg=audit(1674658861.425:4247517): pid=1959 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258008 res=1
type=USER_START msg=audit(1674658861.476:4247518): pid=1959 uid=0 auid=1055 ses=258008 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674658861.476:4247519): pid=1958 uid=0 auid=0 ses=258007 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658861.479:4247520): pid=1959 uid=0 auid=1055 ses=258008 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658861.479:4247521): pid=1958 uid=0 auid=0 ses=258007 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658861.540:4247522): pid=1958 uid=0 auid=0 ses=258007 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658861.553:4247523): pid=1958 uid=0 auid=0 ses=258007 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658861.903:4247524): pid=1959 uid=0 auid=1055 ses=258008 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658861.908:4247525): pid=1959 uid=0 auid=1055 ses=258008 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674658921.930:4247526): pid=2173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658921.931:4247527): pid=2173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658921.931:4247528): pid=2173 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258009 res=1
type=USER_START msg=audit(1674658921.956:4247529): pid=2173 uid=0 auid=1055 ses=258009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658921.959:4247530): pid=2173 uid=0 auid=1055 ses=258009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658922.239:4247531): pid=2173 uid=0 auid=1055 ses=258009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658922.240:4247532): pid=2173 uid=0 auid=1055 ses=258009 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674658974.388:4247533): avc: denied { read } for pid=2338 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674658974.388:4247533): avc: denied { open } for pid=2338 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658974.388:4247533): arch=c000003e syscall=2 success=yes exit=18 a0=55dd041b9f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658974.388:4247533): proctitle="dovecot/auth"
type=AVC msg=audit(1674658974.388:4247534): avc: denied { getattr } for pid=2338 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674658974.388:4247534): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff933a8ab0 a2=7fff933a8ab0 a3=fffffc00 items=0 ppid=5547 pid=2338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658974.388:4247534): proctitle="dovecot/auth"
type=AVC msg=audit(1674658976.298:4247535): avc: denied { name_connect } for pid=2338 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674658976.298:4247535): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff933a88a0 a2=10 a3=7fff933a889c items=0 ppid=5547 pid=2338 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658976.298:4247535): proctitle="dovecot/auth"
type=AVC msg=audit(1674658976.326:4247536): avc: denied { write } for pid=2344 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674658976.326:4247536): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe4ffb0900 a2=6e a3=63d144a0 items=0 ppid=5547 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658976.326:4247536): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674658981.260:4247537): pid=2426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674658981.264:4247538): pid=2426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674658981.264:4247539): pid=2426 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258010 res=1
type=USER_START msg=audit(1674658981.283:4247540): pid=2426 uid=0 auid=1055 ses=258010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674658981.284:4247541): pid=2426 uid=0 auid=1055 ses=258010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674658981.665:4247542): pid=2426 uid=0 auid=1055 ses=258010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674658981.670:4247543): pid=2426 uid=0 auid=1055 ses=258010 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674658981.776:4247544): avc: denied { write } for pid=2344 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674658981.776:4247544): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe4ffb0900 a2=6e a3=63d144a5 items=0 ppid=5547 pid=2344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674658981.776:4247544): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674659041.687:4247545): pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659041.687:4247546): pid=2662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659041.687:4247547): pid=2662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258011 res=1
type=USER_START msg=audit(1674659041.705:4247548): pid=2662 uid=0 auid=1055 ses=258011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659041.707:4247549): pid=2662 uid=0 auid=1055 ses=258011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659042.025:4247550): pid=2662 uid=0 auid=1055 ses=258011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659042.027:4247551): pid=2662 uid=0 auid=1055 ses=258011 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659101.041:4247553): pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659101.041:4247552): pid=2855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659101.041:4247554): pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659101.041:4247555): pid=2855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659101.041:4247556): pid=2854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659101.041:4247557): pid=2853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659101.041:4247558): pid=2855 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258012 res=1
type=LOGIN msg=audit(1674659101.041:4247559): pid=2854 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258013 res=1
type=LOGIN msg=audit(1674659101.041:4247560): pid=2853 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258014 res=1
type=USER_START msg=audit(1674659101.076:4247561): pid=2855 uid=0 auid=1055 ses=258012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674659101.076:4247562): pid=2854 uid=0 auid=0 ses=258013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674659101.077:4247563): pid=2853 uid=0 auid=0 ses=258014 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659101.077:4247564): pid=2855 uid=0 auid=1055 ses=258012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659101.078:4247565): pid=2854 uid=0 auid=0 ses=258013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659101.078:4247566): pid=2853 uid=0 auid=0 ses=258014 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659101.177:4247567): pid=2854 uid=0 auid=0 ses=258013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659101.180:4247568): pid=2854 uid=0 auid=0 ses=258013 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659101.457:4247569): pid=2855 uid=0 auid=1055 ses=258012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659101.459:4247570): pid=2855 uid=0 auid=1055 ses=258012 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659104.431:4247571): pid=2853 uid=0 auid=0 ses=258014 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659104.432:4247572): pid=2853 uid=0 auid=0 ses=258014 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674659143.496:4247573): avc: denied { name_connect } for pid=2338 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674659143.496:4247573): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff933a88a0 a2=10 a3=7fff933a889c items=0 ppid=5547 pid=2338 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659143.496:4247573): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674659144.610:4247574): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674659144.610:4247574): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ba7ea187010 items=0 ppid=3024 pid=3029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659144.610:4247574): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232312E3139352E3230382E3231002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674659151.262:4247575): avc: denied { write } for pid=3057 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674659151.262:4247575): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcd145c960 a2=6e a3=63d1454f items=0 ppid=5547 pid=3057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659151.262:4247575): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674659161.450:4247576): pid=3089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659161.450:4247577): pid=3089 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659161.450:4247578): pid=3089 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258015 res=1
type=USER_START msg=audit(1674659161.469:4247579): pid=3089 uid=0 auid=1055 ses=258015 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659161.471:4247580): pid=3089 uid=0 auid=1055 ses=258015 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659161.740:4247581): pid=3089 uid=0 auid=1055 ses=258015 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659161.743:4247582): pid=3089 uid=0 auid=1055 ses=258015 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659221.758:4247583): pid=3282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659221.759:4247584): pid=3282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659221.759:4247585): pid=3282 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258016 res=1
type=USER_START msg=audit(1674659221.775:4247586): pid=3282 uid=0 auid=1055 ses=258016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659221.777:4247587): pid=3282 uid=0 auid=1055 ses=258016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659222.098:4247588): pid=3282 uid=0 auid=1055 ses=258016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659222.101:4247589): pid=3282 uid=0 auid=1055 ses=258016 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674659227.561:4247590): avc: denied { read } for pid=3310 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674659227.561:4247590): avc: denied { open } for pid=3310 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659227.561:4247590): arch=c000003e syscall=2 success=yes exit=18 a0=55f149946f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659227.561:4247590): proctitle="dovecot/auth"
type=AVC msg=audit(1674659227.562:4247591): avc: denied { getattr } for pid=3310 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659227.562:4247591): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff3d380520 a2=7fff3d380520 a3=fffffc00 items=0 ppid=5547 pid=3310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659227.562:4247591): proctitle="dovecot/auth"
type=AVC msg=audit(1674659229.451:4247592): avc: denied { name_connect } for pid=3310 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674659229.451:4247592): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff3d380310 a2=10 a3=7fff3d38030c items=0 ppid=5547 pid=3310 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659229.451:4247592): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674659281.117:4247593): pid=3476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659281.117:4247594): pid=3476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659281.119:4247595): pid=3476 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258017 res=1
type=USER_START msg=audit(1674659281.129:4247596): pid=3476 uid=0 auid=1055 ses=258017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659281.131:4247597): pid=3476 uid=0 auid=1055 ses=258017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659281.471:4247598): pid=3476 uid=0 auid=1055 ses=258017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659281.474:4247599): pid=3476 uid=0 auid=1055 ses=258017 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659341.491:4247600): pid=3762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659341.491:4247601): pid=3761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659341.491:4247602): pid=3762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659341.491:4247603): pid=3761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659341.492:4247604): pid=3762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258018 res=1
type=LOGIN msg=audit(1674659341.492:4247605): pid=3761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258019 res=1
type=USER_START msg=audit(1674659341.526:4247606): pid=3761 uid=0 auid=0 ses=258019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674659341.527:4247607): pid=3762 uid=0 auid=1055 ses=258018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659341.528:4247608): pid=3762 uid=0 auid=1055 ses=258018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659341.528:4247609): pid=3761 uid=0 auid=0 ses=258019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659341.889:4247610): pid=3762 uid=0 auid=1055 ses=258018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659341.905:4247611): pid=3762 uid=0 auid=1055 ses=258018 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659342.831:4247612): pid=3761 uid=0 auid=0 ses=258019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659342.833:4247613): pid=3761 uid=0 auid=0 ses=258019 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659401.853:4247614): pid=3982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659401.853:4247615): pid=3982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659401.853:4247616): pid=3983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659401.853:4247617): pid=3983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659401.854:4247618): pid=3982 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258020 res=1
type=LOGIN msg=audit(1674659401.854:4247619): pid=3983 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258021 res=1
type=USER_ACCT msg=audit(1674659401.896:4247620): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659401.896:4247621): pid=3984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659401.896:4247622): pid=3984 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258022 res=1
type=USER_START msg=audit(1674659402.018:4247623): pid=3982 uid=0 auid=0 ses=258020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659402.018:4247624): pid=3982 uid=0 auid=0 ses=258020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674659402.022:4247625): pid=3983 uid=0 auid=0 ses=258021 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674659402.022:4247626): pid=3984 uid=0 auid=1055 ses=258022 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659402.024:4247627): pid=3983 uid=0 auid=0 ses=258021 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659402.024:4247628): pid=3984 uid=0 auid=1055 ses=258022 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659402.080:4247629): pid=3982 uid=0 auid=0 ses=258020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659402.088:4247630): pid=3982 uid=0 auid=0 ses=258020 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659402.436:4247631): pid=3984 uid=0 auid=1055 ses=258022 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659402.454:4247632): pid=3984 uid=0 auid=1055 ses=258022 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659405.581:4247633): pid=3983 uid=0 auid=0 ses=258021 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659405.583:4247634): pid=3983 uid=0 auid=0 ses=258021 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659461.611:4247635): pid=4195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659461.611:4247636): pid=4195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659461.611:4247637): pid=4195 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258023 res=1
type=USER_START msg=audit(1674659461.633:4247638): pid=4195 uid=0 auid=1055 ses=258023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659461.635:4247639): pid=4195 uid=0 auid=1055 ses=258023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659462.030:4247640): pid=4195 uid=0 auid=1055 ses=258023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659462.032:4247641): pid=4195 uid=0 auid=1055 ses=258023 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659521.047:4247642): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659521.047:4247643): pid=4391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659521.048:4247644): pid=4391 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258024 res=1
type=USER_START msg=audit(1674659521.061:4247645): pid=4391 uid=0 auid=1055 ses=258024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659521.062:4247646): pid=4391 uid=0 auid=1055 ses=258024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659521.317:4247647): pid=4391 uid=0 auid=1055 ses=258024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659521.319:4247648): pid=4391 uid=0 auid=1055 ses=258024 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674659540.127:4247649): avc: denied { read } for pid=4449 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674659540.127:4247649): avc: denied { open } for pid=4449 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659540.127:4247649): arch=c000003e syscall=2 success=yes exit=18 a0=555c0a477f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659540.127:4247649): proctitle="dovecot/auth"
type=AVC msg=audit(1674659540.127:4247650): avc: denied { getattr } for pid=4449 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659540.127:4247650): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcd0d25f00 a2=7ffcd0d25f00 a3=fffffc00 items=0 ppid=5547 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659540.127:4247650): proctitle="dovecot/auth"
type=AVC msg=audit(1674659542.531:4247651): avc: denied { name_connect } for pid=4449 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674659542.531:4247651): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcd0d25cf0 a2=10 a3=7ffcd0d25cec items=0 ppid=5547 pid=4449 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659542.531:4247651): proctitle="dovecot/auth"
type=AVC msg=audit(1674659542.561:4247652): avc: denied { write } for pid=4459 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674659542.561:4247652): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcd8aba130 a2=6e a3=63d146d6 items=0 ppid=5547 pid=4459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659542.561:4247652): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674659559.775:4247653): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674659559.775:4247653): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aab8e926010 items=0 ppid=4529 pid=4534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659559.775:4247653): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E342E3130302E3139002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543135
type=NETFILTER_CFG msg=audit(1674659569.266:4247654): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674659569.266:4247654): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2add5a821010 items=0 ppid=4562 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659569.266:4247654): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650033362E372E3134302E323332002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543135
type=USER_ACCT msg=audit(1674659581.333:4247655): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659581.333:4247656): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659581.334:4247657): pid=4609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659581.334:4247658): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659581.335:4247659): pid=4610 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258025 res=1
type=LOGIN msg=audit(1674659581.335:4247660): pid=4609 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258026 res=1
type=USER_START msg=audit(1674659581.362:4247661): pid=4610 uid=0 auid=1055 ses=258025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674659581.362:4247662): pid=4609 uid=0 auid=0 ses=258026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659581.363:4247663): pid=4610 uid=0 auid=1055 ses=258025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659581.364:4247664): pid=4609 uid=0 auid=0 ses=258026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659581.431:4247665): pid=4609 uid=0 auid=0 ses=258026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659581.434:4247666): pid=4609 uid=0 auid=0 ses=258026 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659581.660:4247667): pid=4610 uid=0 auid=1055 ses=258025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659581.661:4247668): pid=4610 uid=0 auid=1055 ses=258025 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674659641.675:4247669): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659641.675:4247670): pid=4805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659641.676:4247671): pid=4805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258027 res=1
type=USER_START msg=audit(1674659641.691:4247672): pid=4805 uid=0 auid=1055 ses=258027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659641.693:4247673): pid=4805 uid=0 auid=1055 ses=258027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659641.956:4247674): pid=4805 uid=0 auid=1055 ses=258027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659641.958:4247675): pid=4805 uid=0 auid=1055 ses=258027 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674659679.247:4247676): avc: denied { name_connect } for pid=4954 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674659679.247:4247676): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd577e8080 a2=10 a3=7ffd577e807c items=0 ppid=5547 pid=4954 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659679.247:4247676): proctitle="dovecot/auth"
type=AVC msg=audit(1674659679.277:4247677): avc: denied { write } for pid=4984 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674659679.277:4247677): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffda1da1990 a2=6e a3=63d1475f items=0 ppid=5547 pid=4984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659679.277:4247677): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674659701.981:4247678): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659701.981:4247679): pid=5100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659701.982:4247680): pid=5100 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258028 res=1
type=USER_ACCT msg=audit(1674659701.985:4247681): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659701.985:4247682): pid=5099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659701.985:4247683): pid=5099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258029 res=1
type=USER_START msg=audit(1674659702.051:4247684): pid=5099 uid=0 auid=0 ses=258029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674659702.051:4247685): pid=5100 uid=0 auid=1055 ses=258028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659702.054:4247686): pid=5099 uid=0 auid=0 ses=258029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659702.058:4247687): pid=5100 uid=0 auid=1055 ses=258028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659702.452:4247688): pid=5100 uid=0 auid=1055 ses=258028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659702.457:4247689): pid=5100 uid=0 auid=1055 ses=258028 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659705.480:4247690): pid=5099 uid=0 auid=0 ses=258029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659705.482:4247691): pid=5099 uid=0 auid=0 ses=258029 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674659713.325:4247692): avc: denied { write } for pid=4984 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674659713.325:4247692): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffda1da1990 a2=6e a3=63d14781 items=0 ppid=5547 pid=4984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659713.325:4247692): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674659713.960:4247693): avc: denied { read append } for pid=5147 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674659713.960:4247693): avc: denied { open } for pid=5147 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659713.960:4247693): arch=c000003e syscall=2 success=yes exit=8 a0=561d15bf1a60 a1=402 a2=7fff6d0f37f0 a3=7fff6d0f3260 items=0 ppid=5547 pid=5147 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659713.960:4247693): proctitle="dovecot/imap"
type=AVC msg=audit(1674659713.961:4247694): avc: denied { getattr } for pid=5147 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659713.961:4247694): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff6d0f3750 a2=7fff6d0f3750 a3=7fff6d0f31a0 items=0 ppid=5547 pid=5147 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659713.961:4247694): proctitle="dovecot/imap"
type=AVC msg=audit(1674659713.961:4247695): avc: denied { write } for pid=5147 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659713.961:4247695): arch=c000003e syscall=2 success=yes exit=10 a0=561d15bf6990 a1=2 a2=7fff6d0f34f0 a3=7fff6d0f2fa0 items=0 ppid=5547 pid=5147 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659713.961:4247695): proctitle="dovecot/imap"
type=AVC msg=audit(1674659713.961:4247696): avc: denied { lock } for pid=5147 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659713.961:4247696): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff6d0f33f0 a3=63d14781 items=0 ppid=5547 pid=5147 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659713.961:4247696): proctitle="dovecot/imap"
type=AVC msg=audit(1674659713.961:4247697): avc: denied { read } for pid=5147 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674659713.961:4247697): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=561d15c1f2f8 a2=90800 a3=0 items=0 ppid=5547 pid=5147 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659713.961:4247697): proctitle="dovecot/imap"
type=AVC msg=audit(1674659713.962:4247698): avc: denied { getattr } for pid=5147 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659713.962:4247698): arch=c000003e syscall=4 success=yes exit=0 a0=561d15be1a60 a1=7fff6d0f37a0 a2=7fff6d0f37a0 a3=6f632e6f72676173 items=0 ppid=5547 pid=5147 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659713.962:4247698): proctitle="dovecot/imap"
type=AVC msg=audit(1674659715.968:4247699): avc: denied { write } for pid=5155 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674659715.968:4247699): arch=c000003e syscall=21 success=yes exit=0 a0=55da86cc54c0 a1=2 a2=7b48 a3=7ffc2a5dc6a0 items=0 ppid=5547 pid=5155 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659715.968:4247699): proctitle="dovecot/imap"
type=AVC msg=audit(1674659734.078:4247700): avc: denied { read write } for pid=4974 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674659734.078:4247700): avc: denied { read write open } for pid=4974 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.078:4247700): arch=c000003e syscall=2 success=yes exit=19 a0=55dcb12594d0 a1=2 a2=7ffd42bf02e0 a3=7ffd42beffa0 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.078:4247700): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674659734.078:4247701): avc: denied { getattr } for pid=4974 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.078:4247701): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffd42bf0440 a2=7ffd42bf0440 a3=7ffd42befe20 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.078:4247701): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674659734.081:4247702): avc: denied { add_name } for pid=4974 comm="lmtp" name="1674659734.M78376P4974.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674659734.081:4247702): avc: denied { create } for pid=4974 comm="lmtp" name="1674659734.M78376P4974.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.081:4247702): arch=c000003e syscall=2 success=yes exit=21 a0=55dcb11d3200 a1=2c1 a2=1ff a3=7ffd42befee0 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.081:4247702): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674659734.085:4247703): avc: denied { remove_name } for pid=4974 comm="lmtp" name="1674659734.M78376P4974.host.nexidigital.com" dev="vda1" ino=62201773 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674659734.085:4247703): avc: denied { rename } for pid=4974 comm="lmtp" name="1674659734.M78376P4974.host.nexidigital.com" dev="vda1" ino=62201773 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.085:4247703): arch=c000003e syscall=82 success=yes exit=0 a0=55dcb11d25a8 a1=55dcb11d25f8 a2=69e0 a3=7ffd42befea0 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.085:4247703): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674659734.088:4247704): avc: denied { lock } for pid=4974 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.cache" dev="vda1" ino=320202326 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.088:4247704): arch=c000003e syscall=72 success=yes exit=0 a0=16 a1=7 a2=7ffd42bf0210 a3=63d14796 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.088:4247704): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674659734.089:4247705): avc: denied { unlink } for pid=4974 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=320614366 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.089:4247705): arch=c000003e syscall=87 success=yes exit=0 a0=55dcb1295d40 a1=7ff40bd61071 a2=2f9 a3=4 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.089:4247705): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674659734.089:4247706): avc: denied { append } for pid=4974 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=320200839 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.089:4247706): arch=c000003e syscall=2 success=yes exit=21 a0=55dcb12a6fd0 a1=402 a2=7ffd42bf0370 a3=4 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.089:4247706): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674659734.089:4247707): avc: denied { link } for pid=4974 comm="lmtp" name=".temp.host.nexidigital.com.4974.6c74029c7c655b38" dev="vda1" ino=320614366 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.089:4247707): arch=c000003e syscall=86 success=yes exit=0 a0=55dcb11d38d8 a1=55dcb11d3848 a2=1 a3=63d14796 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.089:4247707): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674659734.090:4247708): avc: denied { setattr } for pid=4974 comm="lmtp" name=".temp.host.nexidigital.com.4974.6c74029c7c655b38" dev="vda1" ino=320614366 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659734.090:4247708): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=426 a3=36 items=0 ppid=5547 pid=4974 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659734.090:4247708): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674659761.502:4247709): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659761.502:4247710): pid=5321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659761.503:4247711): pid=5321 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258030 res=1
type=USER_START msg=audit(1674659761.519:4247712): pid=5321 uid=0 auid=1055 ses=258030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659761.522:4247713): pid=5321 uid=0 auid=1055 ses=258030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659761.809:4247714): pid=5321 uid=0 auid=1055 ses=258030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659761.811:4247715): pid=5321 uid=0 auid=1055 ses=258030 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674659788.438:4247716): avc: denied { name_connect } for pid=4954 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674659788.438:4247716): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd577e8080 a2=10 a3=7ffd577e807c items=0 ppid=5547 pid=4954 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659788.438:4247716): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674659789.526:4247717): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674659789.526:4247717): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b61afe22010 items=0 ppid=5428 pid=5433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659789.526:4247717): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132352E36382E37322E3634002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543135
type=NETFILTER_CFG msg=audit(1674659796.801:4247718): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674659796.801:4247718): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5e1a9ef010 items=0 ppid=5452 pid=5457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659796.801:4247718): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132342E3131382E342E3638002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543135
type=NETFILTER_CFG msg=audit(1674659802.480:4247719): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674659802.480:4247719): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae877143010 items=0 ppid=5477 pid=5482 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659802.480:4247719): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3139312E3133302E313938002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674659821.830:4247720): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659821.830:4247721): pid=5542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659821.832:4247722): pid=5542 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258031 res=1
type=USER_START msg=audit(1674659821.876:4247723): pid=5542 uid=0 auid=1055 ses=258031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659821.877:4247724): pid=5542 uid=0 auid=1055 ses=258031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659822.261:4247725): pid=5542 uid=0 auid=1055 ses=258031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659822.263:4247726): pid=5542 uid=0 auid=1055 ses=258031 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674659860.427:4247727): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674659860.427:4247727): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b3c52c2c010 items=0 ppid=5678 pid=5683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659860.427:4247727): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138302E3136392E35312E313036002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674659881.278:4247728): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659881.278:4247729): pid=5755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659881.278:4247730): pid=5755 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258032 res=1
type=USER_START msg=audit(1674659881.292:4247731): pid=5755 uid=0 auid=1055 ses=258032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659881.294:4247732): pid=5755 uid=0 auid=1055 ses=258032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659881.558:4247733): pid=5755 uid=0 auid=1055 ses=258032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659881.560:4247734): pid=5755 uid=0 auid=1055 ses=258032 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674659930.810:4247735): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674659930.810:4247736): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674659930.810:4247737): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5920 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674659931.711:4247738): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=5920 suid=74 rport=41436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674659931.711:4247739): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=5920 suid=74 rport=41436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674659932.535:4247740): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674659934.530:4247741): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674659934.857:4247742): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5920 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674659934.857:4247743): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5920 suid=74 rport=41436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674659934.858:4247744): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674659934.858:4247745): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674659934.858:4247746): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5912 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674659934.858:4247747): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674659941.592:4247748): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674659941.592:4247749): pid=5949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674659941.593:4247750): pid=5949 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258033 res=1
type=USER_START msg=audit(1674659941.609:4247751): pid=5949 uid=0 auid=1055 ses=258033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674659941.610:4247752): pid=5949 uid=0 auid=1055 ses=258033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674659942.063:4247753): pid=5949 uid=0 auid=1055 ses=258033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674659942.081:4247754): pid=5949 uid=0 auid=1055 ses=258033 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674659988.750:4247755): avc: denied { read } for pid=6128 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674659988.750:4247755): avc: denied { open } for pid=6128 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659988.750:4247755): arch=c000003e syscall=2 success=yes exit=18 a0=55dd65aeef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=6128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659988.750:4247755): proctitle="dovecot/auth"
type=AVC msg=audit(1674659988.750:4247756): avc: denied { getattr } for pid=6128 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674659988.750:4247756): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd57ace740 a2=7ffd57ace740 a3=fffffc00 items=0 ppid=5547 pid=6128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659988.750:4247756): proctitle="dovecot/auth"
type=AVC msg=audit(1674659989.362:4247757): avc: denied { name_connect } for pid=6128 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674659989.362:4247757): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd57ace530 a2=10 a3=7ffd57ace52c items=0 ppid=5547 pid=6128 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659989.362:4247757): proctitle="dovecot/auth"
type=AVC msg=audit(1674659989.390:4247758): avc: denied { write } for pid=6157 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674659989.390:4247758): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff9b621870 a2=6e a3=63d14895 items=0 ppid=5547 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674659989.390:4247758): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674660001.102:4247760): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660001.102:4247759): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660001.102:4247761): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660001.102:4247762): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660001.102:4247765): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660001.102:4247763): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660001.102:4247764): pid=6243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660001.103:4247766): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660001.104:4247767): pid=6241 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258034 res=1
type=LOGIN msg=audit(1674660001.104:4247768): pid=6243 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258035 res=1
type=LOGIN msg=audit(1674660001.104:4247769): pid=6244 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258036 res=1
type=LOGIN msg=audit(1674660001.104:4247770): pid=6242 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258037 res=1
type=USER_START msg=audit(1674660001.211:4247771): pid=6243 uid=0 auid=0 ses=258035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660001.211:4247772): pid=6244 uid=0 auid=1055 ses=258036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660001.212:4247773): pid=6241 uid=0 auid=0 ses=258034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660001.214:4247774): pid=6242 uid=0 auid=0 ses=258037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660001.214:4247775): pid=6244 uid=0 auid=1055 ses=258036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660001.215:4247776): pid=6242 uid=0 auid=0 ses=258037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660001.216:4247777): pid=6243 uid=0 auid=0 ses=258035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660001.217:4247778): pid=6241 uid=0 auid=0 ses=258034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660001.283:4247779): pid=6241 uid=0 auid=0 ses=258034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660001.286:4247780): pid=6241 uid=0 auid=0 ses=258034 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660001.334:4247781): pid=6243 uid=0 auid=0 ses=258035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660001.342:4247782): pid=6243 uid=0 auid=0 ses=258035 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660001.566:4247783): pid=6244 uid=0 auid=1055 ses=258036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660001.568:4247784): pid=6244 uid=0 auid=1055 ses=258036 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674660004.016:4247785): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674660004.016:4247785): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b2a21bda010 items=0 ppid=1588 pid=6281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.016:4247785): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232302E3137312E3135382E38362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A32373A3033002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.021:4247786): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674660004.021:4247786): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b363ef27010 items=0 ppid=1588 pid=6282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.021:4247786): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E31322E33312E3136322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A32373A3238002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.026:4247787): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674660004.026:4247787): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9dea334010 items=0 ppid=1588 pid=6283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.026:4247787): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3230382E38362E342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A33313A3435002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.032:4247788): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674660004.032:4247788): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad7ce59b010 items=0 ppid=1588 pid=6284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.032:4247788): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131372E3130372E3133352E3139372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A34303A3438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.037:4247789): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674660004.037:4247789): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b17031d7010 items=0 ppid=1588 pid=6285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.037:4247789): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131352E3233382E3232342E3139302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A34333A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.042:4247790): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674660004.042:4247790): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b5fc9c16010 items=0 ppid=1588 pid=6286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.042:4247790): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132312E32322E3132342E39322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A34333A3534002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.047:4247791): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674660004.047:4247791): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6fa554e010 items=0 ppid=1588 pid=6287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.047:4247791): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E32332E3232372E37342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A34363A3237002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.052:4247792): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674660004.052:4247792): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b121d18a010 items=0 ppid=1588 pid=6288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.052:4247792): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3133382E35362E3139342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431343A34363A3538002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.057:4247793): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674660004.057:4247793): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b8ce38c1010 items=0 ppid=1588 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.057:4247793): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035382E34362E3132382E38312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A30373A3435002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.063:4247794): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674660004.063:4247794): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b248148d010 items=0 ppid=1588 pid=6290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.063:4247794): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232302E3137382E3130372E3234322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A31313A3032002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660004.069:4247795): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660004.069:4247795): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b7c79dab010 items=0 ppid=1588 pid=6291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660004.069:4247795): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003137352E392E3134312E3131342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A31323A3435002D6A0044524F50
type=CRED_DISP msg=audit(1674660004.623:4247796): pid=6242 uid=0 auid=0 ses=258037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660004.626:4247797): pid=6242 uid=0 auid=0 ses=258037 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674660005.942:4247798): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660005.942:4247799): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660005.942:4247800): pid=6303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660006.267:4247801): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=6303 suid=74 rport=47268 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660006.267:4247802): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=6303 suid=74 rport=47268 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=? res=success'
type=USER_AUTH msg=audit(1674660007.151:4247803): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="lp" exe="/usr/sbin/sshd" hostname=104.244.74.6 addr=104.244.74.6 terminal=ssh res=failed'
type=AVC msg=audit(1674660008.862:4247804): avc: denied { write } for pid=6157 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674660008.862:4247804): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff9b621870 a2=6e a3=63d148a8 items=0 ppid=5547 pid=6157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660008.862:4247804): proctitle=646F7665636F742F61757468002D77
type=USER_AUTH msg=audit(1674660009.444:4247805): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660009.705:4247806): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6303 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660009.705:4247807): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6303 suid=74 rport=47268 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660009.706:4247808): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660009.706:4247809): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660009.706:4247810): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6302 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660009.706:4247811): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674660061.649:4247812): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660061.649:4247813): pid=6478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660061.650:4247814): pid=6478 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258038 res=1
type=USER_START msg=audit(1674660061.671:4247815): pid=6478 uid=0 auid=1055 ses=258038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660061.672:4247816): pid=6478 uid=0 auid=1055 ses=258038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660061.982:4247817): pid=6478 uid=0 auid=1055 ses=258038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660061.985:4247818): pid=6478 uid=0 auid=1055 ses=258038 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660065.298:4247819): pid=6499 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.299:4247820): pid=6499 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.299:4247821): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.323:4247822): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.326:4247823): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.327:4247824): pid=6499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.350:4247825): pid=6503 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.350:4247826): pid=6503 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.351:4247827): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.365:4247828): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.368:4247829): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.368:4247830): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.388:4247831): pid=6511 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.388:4247832): pid=6511 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.389:4247833): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.406:4247834): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.409:4247835): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.409:4247836): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.538:4247837): pid=6516 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.538:4247838): pid=6516 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.539:4247839): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.552:4247840): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.555:4247841): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.555:4247842): pid=6516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.577:4247843): pid=6520 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.577:4247844): pid=6520 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.577:4247845): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.590:4247846): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.593:4247847): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.593:4247848): pid=6520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.613:4247849): pid=6525 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.614:4247850): pid=6525 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.614:4247851): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.626:4247852): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.629:4247853): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.630:4247854): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.660:4247855): pid=6531 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.660:4247856): pid=6531 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.660:4247857): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.674:4247858): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.677:4247859): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.677:4247860): pid=6531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.698:4247861): pid=6536 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.698:4247862): pid=6536 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.698:4247863): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.712:4247864): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.715:4247865): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.715:4247866): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.740:4247867): pid=6542 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.740:4247868): pid=6542 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.740:4247869): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.755:4247870): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.758:4247871): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.758:4247872): pid=6542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.782:4247873): pid=6547 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.782:4247874): pid=6547 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.782:4247875): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.796:4247876): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.799:4247877): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.799:4247878): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660065.820:4247879): pid=6552 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660065.820:4247880): pid=6552 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660065.820:4247881): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660065.833:4247882): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660065.836:4247883): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660065.836:4247884): pid=6552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660068.130:4247885): pid=6565 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660068.130:4247886): pid=6565 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660068.130:4247887): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660068.145:4247888): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660068.201:4247889): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660068.201:4247890): pid=6565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660068.232:4247891): pid=6571 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660068.232:4247892): pid=6571 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660068.233:4247893): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660068.247:4247894): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660068.332:4247895): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660068.332:4247896): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660068.357:4247897): pid=6576 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660068.357:4247898): pid=6576 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F75736572735F66656174757265735F73657474696E677320757365722D313D706D637265736F757263657320757365722D323D76666D61737365747320757365722D333D7777777465737475676F20757365722D343D7368616C696E696A616D657320757365722D353D776F6F647065636B20757365722D363D7777776B6170696E20757365722D373D7777776B6D616F726720757365722D383D646973706F7365617420757365722D393D72656D797361677220757365722D31303D6D7273636C65616E20757365722D31313D7777776E6578696469676974616C20757365722D31323D6769667465726D616E20757365722D31333D70616C636F31323320757365722D31343D6B6F74746179616D63616C6C6472697620757365722D31353D70686D6574616C7320757365722D31363D7374726169676874637572766520757365722D31373D7777776C6574737374616C6B666F6F6420757365722D31383D626F6E696661636567726F757020757365722D31393D77777765766D686F6E646120757365722D32303D6C61756E647279626F6E696661636520757365722D32313D6461727473696D7020757365722D32323D61327A67726F757020757365722D32333D636F6368696E7461786920757365722D32343D7777776B61726574616B65727320757365722D32353D777777726D73776C6C20757365722D32363D6B6572616C61686F6C6920757365722D32373D7777777265736F7572636568756E746520757365722D32383D75676F7473636F6D20757365722D32393D74726176656C626F6E696661636520757365722D33303D777777706D637265736F7572636520666561747572652D313D66696C656D616E6167657220666561747572652D323D6261636B757020666561747572652D333D63726F6E20666561747572652D343D7068706D7961646D696E20666561747572652D353D6D7973716C20666561747572652D363D6D756C746970687020666561747572652D373D6164646F6E646F6D61696E7320666561747572652D383D737562646F6D61696E7320666561747572652D393D77656270726F7465637420666561747572652D31303D73736C696E7374616C6C20666561747572652D31313D77702D746F6F6C6B697420666561747572652D31323D77702D746F6F6C6B69742D64656C757865202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660068.357:4247899): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660068.371:4247900): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660068.482:4247901): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660068.482:4247902): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660068.521:4247903): pid=6582 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660068.521:4247904): pid=6582 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674660068.521:4247905): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660068.539:4247906): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660068.542:4247907): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660068.543:4247908): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660068.570:4247909): pid=6587 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660068.570:4247910): pid=6587 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D76336866347132516E436142437038422E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674660068.570:4247911): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660068.590:4247912): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660068.594:4247913): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660068.594:4247914): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660068.620:4247915): pid=6593 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660068.620:4247916): pid=6593 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D76336866347132516E436142437038422E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674660068.620:4247917): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660068.639:4247918): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660068.644:4247919): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660068.644:4247920): pid=6593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660068.670:4247921): pid=6599 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660068.670:4247922): pid=6599 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D76336866347132516E436142437038422E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674660068.670:4247923): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660068.689:4247924): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660068.693:4247925): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660068.693:4247926): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660068.717:4247927): pid=6604 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660068.717:4247928): pid=6604 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674660068.717:4247929): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660068.731:4247930): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660068.737:4247931): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660068.737:4247932): pid=6604 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660069.148:4247933): pid=6610 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660069.148:4247934): pid=6610 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674660069.148:4247935): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660069.162:4247936): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660069.166:4247937): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660069.166:4247938): pid=6610 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660069.974:4247939): pid=6619 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660069.974:4247940): pid=6619 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674660069.974:4247941): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660069.987:4247942): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660069.990:4247943): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660069.990:4247944): pid=6619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660070.013:4247945): pid=6623 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660070.013:4247946): pid=6623 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674660070.013:4247947): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660070.027:4247948): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660070.030:4247949): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660070.030:4247950): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660070.055:4247951): pid=6628 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660070.055:4247952): pid=6628 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674660070.055:4247953): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660070.070:4247954): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660070.074:4247955): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660070.074:4247956): pid=6628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660070.105:4247957): pid=6634 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660070.105:4247958): pid=6634 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660070.105:4247959): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660070.120:4247960): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660070.248:4247961): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660070.248:4247962): pid=6634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660071.056:4247963): pid=6640 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660071.057:4247964): pid=6640 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660071.057:4247965): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660071.069:4247966): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660071.131:4247967): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660071.131:4247968): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660071.160:4247969): pid=6647 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660071.161:4247970): pid=6647 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F77777765766D686F6E64612F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F77777765766D686F6E64612F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660071.161:4247971): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660071.180:4247972): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660072.345:4247973): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660072.345:4247974): pid=6647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660072.546:4247975): pid=6660 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660072.547:4247976): pid=6660 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674660072.547:4247977): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660072.561:4247978): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660073.787:4247979): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660073.788:4247980): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660074.005:4247981): pid=6671 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660074.005:4247982): pid=6671 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674660074.005:4247983): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660074.020:4247984): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660075.660:4247985): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660075.660:4247986): pid=6671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660075.942:4247987): pid=6686 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660075.942:4247988): pid=6686 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F7474312026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F747431202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674660075.943:4247989): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660075.958:4247990): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660077.122:4247991): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660077.122:4247992): pid=6686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660077.211:4247993): pid=6698 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660077.211:4247994): pid=6698 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674660077.211:4247995): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660077.224:4247996): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660077.611:4247997): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660077.611:4247998): pid=6698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660077.738:4247999): pid=6707 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660077.738:4248000): pid=6707 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674660077.738:4248001): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660077.752:4248002): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660079.970:4248003): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660079.970:4248004): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660080.212:4248005): pid=6724 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660080.213:4248006): pid=6724 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674660080.213:4248007): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660080.226:4248008): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660081.339:4248009): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660081.339:4248010): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660081.546:4248011): pid=6737 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660081.546:4248012): pid=6737 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674660081.546:4248013): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660081.561:4248014): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660082.727:4248015): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660082.727:4248016): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674660083.601:4248017): pid=6753 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674660083.601:4248018): pid=6753 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674660083.601:4248019): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674660083.617:4248020): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674660084.779:4248021): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674660084.779:4248022): pid=6753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674660111.167:4248023): avc: denied { name_connect } for pid=6128 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674660111.167:4248023): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd57ace530 a2=10 a3=7ffd57ace52c items=0 ppid=5547 pid=6128 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660111.167:4248023): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674660112.261:4248024): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674660112.261:4248024): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b47497c0010 items=0 ppid=6863 pid=6870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660112.261:4248024): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E34362E3132382E3831002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543135
type=USER_ACCT msg=audit(1674660122.007:4248025): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660122.008:4248026): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660122.009:4248027): pid=6891 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258039 res=1
type=USER_START msg=audit(1674660122.046:4248028): pid=6891 uid=0 auid=1055 ses=258039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660122.049:4248029): pid=6891 uid=0 auid=1055 ses=258039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660122.414:4248030): pid=6891 uid=0 auid=1055 ses=258039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660122.416:4248031): pid=6891 uid=0 auid=1055 ses=258039 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674660126.808:4248032): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660126.809:4248033): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660126.809:4248034): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.057:4248035): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.057:4248036): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.057:4248037): pid=6919 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6919 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.089:4248038): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.089:4248039): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.089:4248040): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6933 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.109:4248041): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.109:4248042): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.110:4248043): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6939 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.115:4248044): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.115:4248045): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.115:4248046): pid=6943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6943 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.116:4248047): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.116:4248048): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.116:4248049): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6945 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.124:4248050): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.124:4248051): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.124:4248052): pid=6947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6947 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.127:4248053): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.127:4248054): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.127:4248055): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6948 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.130:4248056): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.130:4248057): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.130:4248058): pid=6946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6946 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.135:4248059): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.135:4248060): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.135:4248061): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.138:4248062): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.138:4248063): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.138:4248064): pid=6949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6949 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.139:4248065): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.139:4248066): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.139:4248067): pid=6954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6954 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.143:4248068): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.143:4248069): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.143:4248070): pid=6952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6952 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.145:4248071): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.145:4248072): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.145:4248073): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6953 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.145:4248074): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.146:4248075): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.146:4248076): pid=6951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.146:4248077): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.146:4248078): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.146:4248079): pid=6955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6955 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.149:4248080): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.149:4248081): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.149:4248082): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.152:4248083): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.152:4248084): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.152:4248085): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.152:4248086): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.152:4248087): pid=6958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6958 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.153:4248088): pid=6959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6959 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.155:4248089): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.155:4248090): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.155:4248091): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.155:4248092): pid=6961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6961 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.156:4248093): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.156:4248094): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.156:4248095): pid=6960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6960 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.156:4248096): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.156:4248097): pid=6957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.158:4248098): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.158:4248099): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.158:4248100): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.158:4248101): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.158:4248102): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6963 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.158:4248103): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6962 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.338:4248104): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6919 suid=74 rport=34924 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.338:4248105): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6919 suid=74 rport=34924 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.357:4248106): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6933 suid=74 rport=35022 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.357:4248107): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6933 suid=74 rport=35022 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.361:4248108): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6939 suid=74 rport=34804 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.361:4248109): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6939 suid=74 rport=34804 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.386:4248110): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6943 suid=74 rport=34848 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.386:4248111): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6943 suid=74 rport=34848 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.392:4248112): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6946 suid=74 rport=34930 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.392:4248113): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6946 suid=74 rport=34930 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.392:4248114): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6945 suid=74 rport=35032 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.392:4248115): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6945 suid=74 rport=35032 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.393:4248116): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6948 suid=74 rport=34842 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.394:4248117): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6948 suid=74 rport=34842 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.395:4248118): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6947 suid=74 rport=34810 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.395:4248119): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6947 suid=74 rport=34810 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.403:4248120): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6949 suid=74 rport=34816 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.403:4248121): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6949 suid=74 rport=34816 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.403:4248122): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6950 suid=74 rport=34788 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.403:4248123): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6950 suid=74 rport=34788 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.410:4248124): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6952 suid=74 rport=35108 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.410:4248125): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6952 suid=74 rport=35108 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.417:4248126): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6951 suid=74 rport=34984 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.417:4248127): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6951 suid=74 rport=34984 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.424:4248128): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6953 suid=74 rport=34784 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.424:4248129): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6953 suid=74 rport=34784 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.430:4248130): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6956 suid=74 rport=34974 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.430:4248131): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6956 suid=74 rport=34974 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.435:4248132): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6957 suid=74 rport=35140 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.435:4248133): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6957 suid=74 rport=35140 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.436:4248134): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6955 suid=74 rport=34940 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.436:4248135): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6955 suid=74 rport=34940 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.444:4248136): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6960 suid=74 rport=35062 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.444:4248137): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6960 suid=74 rport=35062 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.446:4248138): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6958 suid=74 rport=34920 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.446:4248139): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6958 suid=74 rport=34920 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.457:4248140): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6961 suid=74 rport=34950 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.457:4248141): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6961 suid=74 rport=34950 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.459:4248142): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6962 suid=74 rport=34956 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.459:4248143): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6962 suid=74 rport=34956 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.460:4248144): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6959 suid=74 rport=34982 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.460:4248145): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6959 suid=74 rport=34982 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.465:4248146): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6963 suid=74 rport=35046 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.465:4248147): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6963 suid=74 rport=35046 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.707:4248148): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.707:4248149): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660127.707:4248150): pid=6966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6966 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.708:4248151): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6966 suid=74 rport=35016 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660127.708:4248152): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6966 suid=74 rport=35016 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660128.077:4248153): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6954 suid=74 rport=35092 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660128.077:4248154): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6954 suid=74 rport=35092 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660128.096:4248155): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660128.096:4248156): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660128.097:4248157): pid=6969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674660128.581:4248158): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.582:4248159): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=CRYPTO_SESSION msg=audit(1674660128.614:4248160): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6969 suid=74 rport=34882 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660128.614:4248161): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6969 suid=74 rport=34882 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=USER_AUTH msg=audit(1674660128.646:4248162): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.694:4248163): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.772:4248164): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.773:4248165): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.775:4248166): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.792:4248167): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.802:4248168): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.804:4248169): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.813:4248170): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.814:4248171): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.814:4248172): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="daemon" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.830:4248173): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.832:4248174): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.833:4248175): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.834:4248176): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660128.843:4248177): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660128.843:4248178): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660128.843:4248179): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6974 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660128.845:4248180): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6974 suid=74 rport=34830 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660128.845:4248181): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6974 suid=74 rport=34830 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=USER_AUTH msg=audit(1674660128.850:4248182): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660128.988:4248183): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660129.150:4248184): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660129.218:4248185): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660129.618:4248186): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660129.697:4248187): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660129.707:4248188): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660129.719:4248189): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660130.061:4248190): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=206.189.188.71 addr=206.189.188.71 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660130.110:4248191): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660130.110:4248192): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660130.111:4248193): pid=6980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6980 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660130.421:4248194): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6980 suid=74 rport=34898 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660130.421:4248195): pid=6979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=6980 suid=74 rport=34898 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=USER_AUTH msg=audit(1674660130.523:4248196): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660130.591:4248197): pid=6918 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674660130.625:4248198): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660130.625:4248198): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f19dffe7010 items=0 ppid=6989 pid=6992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660130.625:4248198): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674660130.630:4248199): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674660130.630:4248199): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fec04d61010 items=0 ppid=6989 pid=6993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660130.630:4248199): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674660130.634:4248200): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674660130.634:4248200): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4a07104010 items=0 ppid=6989 pid=6994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660130.634:4248200): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674660130.639:4248201): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674660130.639:4248201): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa6dffac010 items=0 ppid=6989 pid=6995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660130.639:4248201): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=USER_AUTH msg=audit(1674660130.817:4248202): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660130.817:4248203): pid=6917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660130.850:4248204): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6954 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660130.850:4248205): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6954 suid=74 rport=35092 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660130.851:4248206): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660130.851:4248207): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660130.851:4248208): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6932 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660130.851:4248209): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660130.882:4248210): pid=6926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660130.930:4248211): pid=6923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674660130.944:4248212): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660130.944:4248212): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f03f1186010 items=0 ppid=6989 pid=7003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660130.944:4248212): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132312E3135392E3230372E3633002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660130.950:4248213): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674660130.950:4248213): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc424900010 items=0 ppid=6989 pid=7004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660130.950:4248213): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132312E3135392E3230372E3633002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674660130.956:4248214): table=filter family=2 entries=1032
type=SYSCALL msg=audit(1674660130.956:4248214): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f30bee86010 items=0 ppid=6989 pid=7005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660130.956:4248214): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003230362E3138392E3138382E3731002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660130.961:4248215): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674660130.961:4248215): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f07b0cb6010 items=0 ppid=6989 pid=7006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660130.961:4248215): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003230362E3138392E3138382E3731002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674660130.990:4248216): pid=6936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.008:4248217): pid=6924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.009:4248218): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.010:4248219): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.028:4248220): pid=6922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.036:4248221): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.039:4248222): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.048:4248223): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.049:4248224): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.050:4248225): pid=6930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.065:4248226): pid=6941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.068:4248227): pid=6942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.068:4248228): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.069:4248229): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.070:4248230): pid=6944 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.079:4248231): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.085:4248232): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.092:4248233): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.224:4248234): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660131.905:4248235): pid=6927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=206.189.188.71 terminal=ssh res=failed'
type=AVC msg=audit(1674660137.415:4248236): avc: denied { write } for pid=7038 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674660137.415:4248236): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc3ecdbee0 a2=6e a3=63d14929 items=0 ppid=5547 pid=7038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660137.415:4248236): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674660164.160:4248237): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660164.160:4248237): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab8d9a6f010 items=0 ppid=7137 pid=7142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660164.160:4248237): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132302E3232342E36322E3735002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674660170.712:4248238): avc: denied { write } for pid=7038 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674660170.712:4248238): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc3ecdbee0 a2=6e a3=63d1494a items=0 ppid=5547 pid=7038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660170.712:4248238): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674660181.437:4248239): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660181.437:4248240): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660181.437:4248241): pid=7191 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258040 res=1
type=USER_START msg=audit(1674660181.460:4248242): pid=7191 uid=0 auid=1055 ses=258040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660181.461:4248243): pid=7191 uid=0 auid=1055 ses=258040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660181.795:4248244): pid=7191 uid=0 auid=1055 ses=258040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660181.797:4248245): pid=7191 uid=0 auid=1055 ses=258040 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660241.812:4248246): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660241.812:4248247): pid=7389 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660241.812:4248248): pid=7389 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258041 res=1
type=USER_START msg=audit(1674660241.826:4248249): pid=7389 uid=0 auid=1055 ses=258041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660241.828:4248250): pid=7389 uid=0 auid=1055 ses=258041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660242.104:4248251): pid=7389 uid=0 auid=1055 ses=258041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660242.106:4248252): pid=7389 uid=0 auid=1055 ses=258041 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674660254.380:4248253): avc: denied { read } for pid=7437 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674660254.380:4248253): avc: denied { open } for pid=7437 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660254.380:4248253): arch=c000003e syscall=2 success=yes exit=18 a0=559945221f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=7437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660254.380:4248253): proctitle="dovecot/auth"
type=AVC msg=audit(1674660254.381:4248254): avc: denied { getattr } for pid=7437 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660254.381:4248254): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff2fca76a0 a2=7fff2fca76a0 a3=fffffc00 items=0 ppid=5547 pid=7437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660254.381:4248254): proctitle="dovecot/auth"
type=AVC msg=audit(1674660256.225:4248255): avc: denied { name_connect } for pid=7437 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674660256.225:4248255): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff2fca7490 a2=10 a3=7fff2fca748c items=0 ppid=5547 pid=7437 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660256.225:4248255): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674660301.122:4248256): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660301.122:4248257): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660301.122:4248258): pid=7589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660301.122:4248259): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660301.123:4248260): pid=7588 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258042 res=1
type=LOGIN msg=audit(1674660301.123:4248261): pid=7589 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258043 res=1
type=USER_START msg=audit(1674660301.155:4248262): pid=7589 uid=0 auid=1055 ses=258043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660301.155:4248263): pid=7588 uid=0 auid=0 ses=258042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660301.156:4248264): pid=7589 uid=0 auid=1055 ses=258043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660301.157:4248265): pid=7588 uid=0 auid=0 ses=258042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660301.402:4248266): pid=7589 uid=0 auid=1055 ses=258043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660301.406:4248267): pid=7589 uid=0 auid=1055 ses=258043 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660304.495:4248268): pid=7588 uid=0 auid=0 ses=258042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660304.497:4248269): pid=7588 uid=0 auid=0 ses=258042 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674660340.514:4248270): avc: denied { name_connect } for pid=7741 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674660340.514:4248270): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc9d674640 a2=10 a3=7ffc9d67463c items=0 ppid=5547 pid=7741 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660340.514:4248270): proctitle="dovecot/auth"
type=AVC msg=audit(1674660340.546:4248271): avc: denied { write } for pid=7769 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674660340.546:4248271): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffeb1976bb0 a2=6e a3=63d149f4 items=0 ppid=5547 pid=7769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660340.546:4248271): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674660361.520:4248272): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660361.521:4248273): pid=7895 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660361.522:4248274): pid=7895 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258044 res=1
type=USER_START msg=audit(1674660361.540:4248275): pid=7895 uid=0 auid=1055 ses=258044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660361.542:4248276): pid=7895 uid=0 auid=1055 ses=258044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660361.902:4248277): pid=7895 uid=0 auid=1055 ses=258044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660361.904:4248278): pid=7895 uid=0 auid=1055 ses=258044 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660421.921:4248279): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660421.921:4248280): pid=8087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660421.921:4248281): pid=8087 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258045 res=1
type=USER_START msg=audit(1674660421.940:4248282): pid=8087 uid=0 auid=1055 ses=258045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660421.942:4248283): pid=8087 uid=0 auid=1055 ses=258045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660422.188:4248284): pid=8087 uid=0 auid=1055 ses=258045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660422.190:4248285): pid=8087 uid=0 auid=1055 ses=258045 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674660459.901:4248286): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=8210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660459.901:4248287): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=8210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660459.901:4248288): pid=8210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8210 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660460.132:4248289): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=8210 suid=74 rport=50612 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660460.132:4248290): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=8210 suid=74 rport=50612 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=? res=success'
type=USER_AUTH msg=audit(1674660460.883:4248291): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=205.185.113.129 addr=205.185.113.129 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660462.697:4248292): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660463.471:4248293): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8210 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660463.471:4248294): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8210 suid=74 rport=50612 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660463.473:4248295): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=8208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660463.473:4248296): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=8208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660463.473:4248297): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8208 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660463.473:4248298): pid=8208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=205.185.113.129 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674660481.207:4248299): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660481.207:4248300): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660481.207:4248301): pid=8278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660481.207:4248302): pid=8279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660481.207:4248303): pid=8278 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258046 res=1
type=LOGIN msg=audit(1674660481.207:4248304): pid=8279 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258047 res=1
type=USER_START msg=audit(1674660481.268:4248305): pid=8278 uid=0 auid=0 ses=258046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660481.270:4248306): pid=8279 uid=0 auid=1055 ses=258047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660481.271:4248307): pid=8278 uid=0 auid=0 ses=258046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660481.271:4248308): pid=8279 uid=0 auid=1055 ses=258047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660481.324:4248309): pid=8278 uid=0 auid=0 ses=258046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660481.326:4248310): pid=8278 uid=0 auid=0 ses=258046 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660481.570:4248311): pid=8279 uid=0 auid=1055 ses=258047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660481.572:4248312): pid=8279 uid=0 auid=1055 ses=258047 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674660525.247:4248313): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=8437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660525.247:4248314): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=8437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660525.247:4248315): pid=8437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660525.249:4248316): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=8437 suid=74 rport=60609 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.7.34.33 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660525.249:4248317): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=8437 suid=74 rport=60609 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=2.7.34.33 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660525.435:4248318): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8437 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660525.435:4248319): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=8436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660525.435:4248320): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=8436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660525.436:4248321): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8436 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660525.436:4248322): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=2.7.34.33 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674660541.592:4248323): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660541.593:4248324): pid=8490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660541.594:4248325): pid=8490 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258048 res=1
type=USER_START msg=audit(1674660541.612:4248326): pid=8490 uid=0 auid=1055 ses=258048 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660541.612:4248327): pid=8490 uid=0 auid=1055 ses=258048 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660541.984:4248328): pid=8490 uid=0 auid=1055 ses=258048 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660541.986:4248329): pid=8490 uid=0 auid=1055 ses=258048 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660602.019:4248330): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660602.020:4248331): pid=8699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660602.020:4248332): pid=8699 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258049 res=1
type=USER_ACCT msg=audit(1674660602.037:4248333): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660602.037:4248334): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660602.043:4248335): pid=8700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660602.044:4248336): pid=8700 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258050 res=1
type=CRED_ACQ msg=audit(1674660602.047:4248337): pid=8701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660602.047:4248338): pid=8701 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258051 res=1
type=USER_START msg=audit(1674660602.116:4248339): pid=8699 uid=0 auid=0 ses=258049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660602.116:4248340): pid=8701 uid=0 auid=1055 ses=258051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660602.120:4248341): pid=8700 uid=0 auid=0 ses=258050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660602.122:4248342): pid=8699 uid=0 auid=0 ses=258049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660602.122:4248343): pid=8701 uid=0 auid=1055 ses=258051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660602.124:4248344): pid=8700 uid=0 auid=0 ses=258050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660602.164:4248345): pid=8699 uid=0 auid=0 ses=258049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660602.168:4248346): pid=8699 uid=0 auid=0 ses=258049 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660602.473:4248347): pid=8701 uid=0 auid=1055 ses=258051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660602.476:4248348): pid=8701 uid=0 auid=1055 ses=258051 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660605.522:4248349): pid=8700 uid=0 auid=0 ses=258050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660605.524:4248350): pid=8700 uid=0 auid=0 ses=258050 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674660622.676:4248351): avc: denied { read } for pid=8797 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674660622.676:4248351): avc: denied { open } for pid=8797 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660622.676:4248351): arch=c000003e syscall=2 success=yes exit=18 a0=55a64012ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660622.676:4248351): proctitle="dovecot/auth"
type=AVC msg=audit(1674660622.676:4248352): avc: denied { getattr } for pid=8797 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660622.676:4248352): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe946b65d0 a2=7ffe946b65d0 a3=fffffc00 items=0 ppid=5547 pid=8797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660622.676:4248352): proctitle="dovecot/auth"
type=AVC msg=audit(1674660629.035:4248353): avc: denied { name_connect } for pid=8797 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674660629.035:4248353): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe946b63c0 a2=10 a3=7ffe946b63bc items=0 ppid=5547 pid=8797 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660629.035:4248353): proctitle="dovecot/auth"
type=AVC msg=audit(1674660629.065:4248354): avc: denied { write } for pid=8838 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674660629.065:4248354): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdf2b27d70 a2=6e a3=63d14b15 items=0 ppid=5547 pid=8838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660629.065:4248354): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674660631.739:4248355): avc: denied { read append } for pid=8840 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674660631.739:4248355): avc: denied { open } for pid=8840 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660631.739:4248355): arch=c000003e syscall=2 success=yes exit=8 a0=561a617f6a60 a1=402 a2=7ffe1bc84ba0 a3=7ffe1bc84620 items=0 ppid=5547 pid=8840 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660631.739:4248355): proctitle="dovecot/imap"
type=AVC msg=audit(1674660631.739:4248356): avc: denied { getattr } for pid=8840 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660631.739:4248356): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe1bc84b00 a2=7ffe1bc84b00 a3=7ffe1bc84560 items=0 ppid=5547 pid=8840 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660631.739:4248356): proctitle="dovecot/imap"
type=AVC msg=audit(1674660631.739:4248357): avc: denied { write } for pid=8840 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660631.739:4248357): arch=c000003e syscall=2 success=yes exit=10 a0=561a617fb990 a1=2 a2=7ffe1bc848a0 a3=7ffe1bc84360 items=0 ppid=5547 pid=8840 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660631.739:4248357): proctitle="dovecot/imap"
type=AVC msg=audit(1674660631.739:4248358): avc: denied { lock } for pid=8840 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660631.739:4248358): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe1bc847a0 a3=63d14b17 items=0 ppid=5547 pid=8840 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660631.739:4248358): proctitle="dovecot/imap"
type=AVC msg=audit(1674660631.739:4248359): avc: denied { read } for pid=8840 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674660631.739:4248359): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=561a618242f8 a2=90800 a3=0 items=0 ppid=5547 pid=8840 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660631.739:4248359): proctitle="dovecot/imap"
type=AVC msg=audit(1674660631.740:4248360): avc: denied { getattr } for pid=8840 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660631.740:4248360): arch=c000003e syscall=4 success=yes exit=0 a0=561a617e6a60 a1=7ffe1bc84b50 a2=7ffe1bc84b50 a3=6f632e6f72676173 items=0 ppid=5547 pid=8840 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660631.740:4248360): proctitle="dovecot/imap"
type=AVC msg=audit(1674660635.714:4248361): avc: denied { write } for pid=8863 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674660635.714:4248361): arch=c000003e syscall=21 success=yes exit=0 a0=55d7091644c0 a1=2 a2=7b48 a3=7ffc03301760 items=0 ppid=5547 pid=8863 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660635.714:4248361): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674660661.549:4248362): pid=9040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660661.549:4248363): pid=9040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660661.550:4248364): pid=9040 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258052 res=1
type=USER_START msg=audit(1674660661.571:4248365): pid=9040 uid=0 auid=1055 ses=258052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660661.573:4248366): pid=9040 uid=0 auid=1055 ses=258052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660661.830:4248367): pid=9040 uid=0 auid=1055 ses=258052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660661.834:4248368): pid=9040 uid=0 auid=1055 ses=258052 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674660690.759:4248369): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660690.759:4248370): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660690.759:4248371): pid=9158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9158 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660690.963:4248372): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=9158 suid=74 rport=44833 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660690.964:4248373): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=9158 suid=74 rport=44833 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=? res=success'
type=USER_AUTH msg=audit(1674660692.129:4248374): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.88.247 addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660693.793:4248375): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660694.340:4248376): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.88.247 addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660696.279:4248377): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660701.068:4248378): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.88.247 addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660703.303:4248379): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660704.545:4248380): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.88.247 addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660706.524:4248381): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660707.361:4248382): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.33.88.247 addr=114.33.88.247 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660709.752:4248383): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660709.972:4248384): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9158 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660709.972:4248385): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9158 suid=74 rport=44833 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660709.973:4248386): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660709.973:4248387): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660709.973:4248388): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9157 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660709.973:4248389): pid=9157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.88.247 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674660711.107:4248390): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674660711.107:4248390): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6f79452010 items=0 ppid=9224 pid=9227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660711.107:4248390): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674660711.111:4248391): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674660711.111:4248391): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc9c0a98010 items=0 ppid=9224 pid=9228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660711.111:4248391): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674660711.115:4248392): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674660711.115:4248392): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd1c0569010 items=0 ppid=9224 pid=9229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660711.115:4248392): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674660711.119:4248393): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674660711.119:4248393): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0bf0e73010 items=0 ppid=9224 pid=9230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660711.119:4248393): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674660711.421:4248394): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674660711.421:4248394): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb650feb010 items=0 ppid=9224 pid=9239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660711.421:4248394): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003136322E3231322E3135342E323138002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660711.426:4248395): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660711.426:4248395): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd4db351010 items=0 ppid=9224 pid=9240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660711.426:4248395): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003136322E3231322E3135342E323138002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674660711.432:4248396): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674660711.432:4248396): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f22adea0010 items=0 ppid=9224 pid=9241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660711.432:4248396): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003131342E33332E38382E323437002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660711.437:4248397): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660711.437:4248397): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1afac59010 items=0 ppid=9224 pid=9242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660711.437:4248397): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003131342E33332E38382E323437002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674660721.851:4248398): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660721.851:4248399): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660721.853:4248400): pid=9275 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258053 res=1
type=USER_START msg=audit(1674660721.876:4248401): pid=9275 uid=0 auid=1055 ses=258053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660721.879:4248402): pid=9275 uid=0 auid=1055 ses=258053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660722.306:4248403): pid=9275 uid=0 auid=1055 ses=258053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660722.312:4248404): pid=9275 uid=0 auid=1055 ses=258053 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674660732.307:4248405): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660732.307:4248406): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660732.307:4248407): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660732.313:4248408): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9309 suid=74 rport=24274 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660732.313:4248409): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9309 suid=74 rport=24274 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=? res=success'
type=USER_AUTH msg=audit(1674660732.466:4248410): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.16.202.187 addr=103.16.202.187 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660734.290:4248411): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660734.299:4248412): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9309 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660734.304:4248413): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9309 suid=74 rport=24274 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660734.306:4248414): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660734.306:4248415): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660734.306:4248416): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660734.306:4248417): pid=9308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660745.790:4248418): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660745.790:4248419): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660745.790:4248420): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9377 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660745.798:4248421): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9377 suid=74 rport=43070 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660745.799:4248422): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9377 suid=74 rport=43070 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=? res=success'
type=USER_AUTH msg=audit(1674660745.962:4248423): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=183.82.117.42 addr=183.82.117.42 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660748.237:4248424): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660748.249:4248425): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9377 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660748.249:4248426): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9377 suid=74 rport=43070 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660748.250:4248427): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660748.251:4248428): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660748.251:4248429): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660748.251:4248430): pid=9376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660754.655:4248431): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660754.656:4248432): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660754.656:4248433): pid=9402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9402 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660754.816:4248434): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9402 suid=74 rport=56722 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660754.816:4248435): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9402 suid=74 rport=56722 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=? res=success'
type=USER_AUTH msg=audit(1674660755.585:4248436): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=46.150.0.56 addr=46.150.0.56 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660757.234:4248437): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660757.398:4248438): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9402 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660757.398:4248439): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9402 suid=74 rport=56722 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660757.400:4248440): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660757.400:4248441): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660757.400:4248442): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9401 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660757.401:4248443): pid=9401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660777.148:4248444): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660777.148:4248445): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660777.148:4248446): pid=9478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9478 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660777.288:4248447): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9478 suid=74 rport=39830 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660777.288:4248448): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9478 suid=74 rport=39830 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=? res=success'
type=USER_AUTH msg=audit(1674660777.975:4248449): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=51.75.124.212 addr=51.75.124.212 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660779.643:4248450): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660779.787:4248451): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9478 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660779.787:4248452): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9478 suid=74 rport=39830 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660779.788:4248453): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660779.788:4248454): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660779.788:4248455): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9477 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660779.788:4248456): pid=9477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674660781.329:4248457): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660781.329:4248458): pid=9501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660781.329:4248459): pid=9501 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258054 res=1
type=USER_START msg=audit(1674660781.349:4248460): pid=9501 uid=0 auid=1055 ses=258054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660781.360:4248461): pid=9501 uid=0 auid=1055 ses=258054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660781.781:4248462): pid=9501 uid=0 auid=1055 ses=258054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660781.783:4248463): pid=9501 uid=0 auid=1055 ses=258054 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674660841.599:4248464): avc: denied { read } for pid=9690 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674660841.599:4248464): avc: denied { open } for pid=9690 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660841.599:4248464): arch=c000003e syscall=2 success=yes exit=18 a0=560bac25cf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=9690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660841.599:4248464): proctitle="dovecot/auth"
type=AVC msg=audit(1674660841.599:4248465): avc: denied { getattr } for pid=9690 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660841.599:4248465): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffde3f09520 a2=7ffde3f09520 a3=fffffc00 items=0 ppid=5547 pid=9690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660841.599:4248465): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674660841.797:4248466): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660841.797:4248467): pid=9691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660841.797:4248468): pid=9691 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258055 res=1
type=USER_START msg=audit(1674660841.814:4248469): pid=9691 uid=0 auid=1055 ses=258055 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660841.816:4248470): pid=9691 uid=0 auid=1055 ses=258055 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660842.209:4248471): pid=9691 uid=0 auid=1055 ses=258055 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660842.210:4248472): pid=9691 uid=0 auid=1055 ses=258055 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674660843.188:4248473): avc: denied { name_connect } for pid=9690 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674660843.188:4248473): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffde3f09310 a2=10 a3=7ffde3f0930c items=0 ppid=5547 pid=9690 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660843.188:4248473): proctitle="dovecot/auth"
type=AVC msg=audit(1674660843.219:4248474): avc: denied { write } for pid=9707 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674660843.219:4248474): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcb462b010 a2=6e a3=63d14beb items=0 ppid=5547 pid=9707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660843.219:4248474): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674660862.096:4248475): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660862.096:4248476): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660862.096:4248477): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9765 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660862.145:4248478): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9765 suid=74 rport=47222 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660862.145:4248479): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9765 suid=74 rport=47222 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=? res=success'
type=USER_AUTH msg=audit(1674660862.475:4248480): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=211.25.1.20 addr=211.25.1.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660864.811:4248481): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660864.862:4248482): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9765 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660864.862:4248483): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9765 suid=74 rport=47222 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660864.864:4248484): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660864.864:4248485): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660864.864:4248486): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660864.864:4248487): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660869.747:4248488): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660869.747:4248489): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660869.747:4248490): pid=9811 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9811 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660869.907:4248491): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9811 suid=74 rport=42487 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.125.67.35 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660869.908:4248492): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9811 suid=74 rport=42487 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.125.67.35 terminal=? res=success'
type=USER_AUTH msg=audit(1674660871.145:4248493): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=211.125.67.35 addr=211.125.67.35 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660872.382:4248494): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=211.125.67.35 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660872.953:4248495): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9811 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660872.953:4248496): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9811 suid=74 rport=42487 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.125.67.35 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660872.954:4248497): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660872.954:4248498): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660872.954:4248499): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9810 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660872.954:4248500): pid=9810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=211.125.67.35 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660886.882:4248501): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660886.883:4248502): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660886.883:4248503): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660887.001:4248504): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9870 suid=74 rport=38400 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660887.001:4248505): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9870 suid=74 rport=38400 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=? res=success'
type=USER_AUTH msg=audit(1674660888.657:4248506): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.88.240.2 addr=103.88.240.2 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660890.897:4248507): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660891.021:4248508): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9870 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660891.021:4248509): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9870 suid=74 rport=38400 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660891.023:4248510): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660891.023:4248511): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660891.023:4248512): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660891.023:4248513): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660893.941:4248514): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660893.941:4248515): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660893.941:4248516): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9887 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660894.198:4248517): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9887 suid=74 rport=59380 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.2.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660894.198:4248518): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9887 suid=74 rport=59380 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.2.1 terminal=? res=success'
type=USER_AUTH msg=audit(1674660895.350:4248519): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=137.184.2.1 addr=137.184.2.1 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660896.547:4248520): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.2.1 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660896.808:4248521): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9887 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660896.808:4248522): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9887 suid=74 rport=59380 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.2.1 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660896.809:4248523): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660896.809:4248524): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660896.809:4248525): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9886 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660896.809:4248526): pid=9886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.2.1 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674660901.228:4248527): pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660901.228:4248528): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674660901.228:4248529): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660901.228:4248530): pid=9912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660901.228:4248531): pid=9914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660901.228:4248532): pid=9911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660901.230:4248533): pid=9912 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258056 res=1
type=LOGIN msg=audit(1674660901.230:4248534): pid=9911 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258057 res=1
type=LOGIN msg=audit(1674660901.230:4248535): pid=9914 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258058 res=1
type=USER_ACCT msg=audit(1674660901.233:4248536): pid=9913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660901.233:4248537): pid=9913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660901.234:4248538): pid=9913 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258059 res=1
type=USER_START msg=audit(1674660901.291:4248539): pid=9914 uid=0 auid=1055 ses=258058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660901.291:4248540): pid=9913 uid=0 auid=0 ses=258059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660901.291:4248541): pid=9912 uid=0 auid=0 ses=258056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674660901.292:4248542): pid=9911 uid=0 auid=0 ses=258057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660901.293:4248543): pid=9914 uid=0 auid=1055 ses=258058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660901.294:4248544): pid=9912 uid=0 auid=0 ses=258056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660901.294:4248545): pid=9913 uid=0 auid=0 ses=258059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660901.295:4248546): pid=9911 uid=0 auid=0 ses=258057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660901.398:4248547): pid=9912 uid=0 auid=0 ses=258056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660901.401:4248548): pid=9913 uid=0 auid=0 ses=258059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660901.407:4248549): pid=9912 uid=0 auid=0 ses=258056 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660901.408:4248550): pid=9913 uid=0 auid=0 ses=258059 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660901.693:4248551): pid=9914 uid=0 auid=1055 ses=258058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660901.696:4248552): pid=9914 uid=0 auid=1055 ses=258058 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660904.694:4248553): pid=9911 uid=0 auid=0 ses=258057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660904.705:4248554): pid=9911 uid=0 auid=0 ses=258057 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674660909.668:4248555): avc: denied { name_connect } for pid=9690 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674660909.668:4248555): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffde3f09310 a2=10 a3=7ffde3f0930c items=0 ppid=5547 pid=9690 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660909.668:4248555): proctitle="dovecot/auth"
type=AVC msg=audit(1674660909.681:4248556): avc: denied { write } for pid=9707 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674660909.681:4248556): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcb462b010 a2=6e a3=63d14c2d items=0 ppid=5547 pid=9707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660909.681:4248556): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674660912.974:4248557): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660912.974:4248558): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660912.974:4248559): pid=9979 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9979 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660913.245:4248560): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9979 suid=74 rport=41842 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660913.245:4248561): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=9979 suid=74 rport=41842 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=? res=success'
type=USER_AUTH msg=audit(1674660914.460:4248562): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=159.65.43.192 addr=159.65.43.192 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660915.933:4248563): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660916.207:4248564): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9979 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660916.207:4248565): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9979 suid=74 rport=41842 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660916.209:4248566): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660916.209:4248567): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660916.209:4248568): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9978 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660916.209:4248569): pid=9978 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674660961.728:4248570): pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674660961.728:4248571): pid=10142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674660961.729:4248572): pid=10142 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258060 res=1
type=USER_START msg=audit(1674660961.751:4248573): pid=10142 uid=0 auid=1055 ses=258060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674660961.754:4248574): pid=10142 uid=0 auid=1055 ses=258060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674660962.097:4248575): pid=10142 uid=0 auid=1055 ses=258060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674660962.100:4248576): pid=10142 uid=0 auid=1055 ses=258060 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674660963.418:4248577): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660963.418:4248578): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660963.418:4248579): pid=10154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10154 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660963.717:4248580): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10154 suid=74 rport=53679 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.131.255.12 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660963.717:4248581): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10154 suid=74 rport=53679 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.131.255.12 terminal=? res=success'
type=USER_AUTH msg=audit(1674660965.043:4248582): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=190.131.255.12 addr=190.131.255.12 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660967.520:4248583): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.131.255.12 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660967.819:4248584): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10154 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660967.819:4248585): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10154 suid=74 rport=53679 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.131.255.12 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660967.820:4248586): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660967.821:4248587): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660967.821:4248588): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660967.821:4248589): pid=10153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.131.255.12 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660986.938:4248590): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660986.938:4248591): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660986.938:4248592): pid=10243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660987.222:4248593): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10243 suid=74 rport=40994 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660987.222:4248594): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10243 suid=74 rport=40994 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660987.876:4248595): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660987.877:4248596): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660987.877:4248597): pid=10246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10246 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660988.134:4248598): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10246 suid=74 rport=60636 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.2.1 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660988.134:4248599): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10246 suid=74 rport=60636 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.2.1 terminal=? res=success'
type=USER_AUTH msg=audit(1674660989.295:4248600): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=137.184.2.1 addr=137.184.2.1 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674660991.166:4248601): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674660991.166:4248601): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbf9c0f6010 items=0 ppid=10269 pid=10281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.166:4248601): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674660991.172:4248602): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674660991.172:4248602): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fccdda3e010 items=0 ppid=10269 pid=10282 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.172:4248602): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674660991.177:4248603): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674660991.177:4248603): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff07ee6a010 items=0 ppid=10269 pid=10283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.177:4248603): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674660991.182:4248604): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674660991.182:4248604): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f50d57ae010 items=0 ppid=10269 pid=10284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.182:4248604): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=AVC msg=audit(1674660991.334:4248605): avc: denied { read } for pid=10297 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674660991.334:4248605): avc: denied { open } for pid=10297 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660991.334:4248605): arch=c000003e syscall=2 success=yes exit=18 a0=55b76b4f4f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=10297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.334:4248605): proctitle="dovecot/auth"
type=AVC msg=audit(1674660991.334:4248606): avc: denied { getattr } for pid=10297 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674660991.334:4248606): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc118bdaa0 a2=7ffc118bdaa0 a3=fffffc00 items=0 ppid=5547 pid=10297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.334:4248606): proctitle="dovecot/auth"
type=USER_AUTH msg=audit(1674660991.400:4248607): pid=10245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.2.1 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660991.542:4248608): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=159.65.43.192 addr=159.65.43.192 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674660991.587:4248609): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674660991.587:4248609): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f51b9121010 items=0 ppid=10269 pid=10309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.587:4248609): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131302E34392E37362E323434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660991.594:4248610): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660991.594:4248610): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5f13c8c010 items=0 ppid=10269 pid=10310 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.594:4248610): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131302E34392E37362E323434002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674660991.602:4248611): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674660991.602:4248611): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f590a9a6010 items=0 ppid=10269 pid=10311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.602:4248611): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003133372E3138342E322E31002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660991.610:4248612): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660991.610:4248612): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9188ccb010 items=0 ppid=10269 pid=10312 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.610:4248612): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003133372E3138342E322E31002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674660991.983:4248613): avc: denied { name_connect } for pid=10297 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674660991.983:4248613): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc118bd890 a2=10 a3=7ffc118bd88c items=0 ppid=5547 pid=10297 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660991.983:4248613): proctitle="dovecot/auth"
type=AVC msg=audit(1674660992.032:4248614): avc: denied { write } for pid=10338 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674660992.032:4248614): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe83804cb0 a2=6e a3=63d14c80 items=0 ppid=5547 pid=10338 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660992.032:4248614): proctitle=646F7665636F742F61757468002D77
type=USER_AUTH msg=audit(1674660992.923:4248615): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660993.212:4248616): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10243 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660993.212:4248617): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10243 suid=74 rport=40994 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660993.214:4248618): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660993.214:4248619): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660993.214:4248620): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660993.214:4248621): pid=10242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.65.43.192 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674660996.367:4248622): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674660996.367:4248622): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc1e2ad1010 items=0 ppid=10409 pid=10412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660996.367:4248622): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674660996.371:4248623): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674660996.371:4248623): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f93a8829010 items=0 ppid=10409 pid=10413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660996.371:4248623): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674660996.375:4248624): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674660996.375:4248624): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0731a1c010 items=0 ppid=10409 pid=10414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660996.375:4248624): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674660996.379:4248625): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674660996.379:4248625): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3d92312010 items=0 ppid=10409 pid=10415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660996.379:4248625): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674660996.680:4248626): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674660996.680:4248626): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f364c8f6010 items=0 ppid=10409 pid=10425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660996.680:4248626): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003134362E3139302E36312E3535002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660996.686:4248627): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660996.686:4248627): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7e880d5010 items=0 ppid=10409 pid=10426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660996.686:4248627): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003134362E3139302E36312E3535002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674660996.692:4248628): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674660996.692:4248628): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feeeaa85010 items=0 ppid=10409 pid=10427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660996.692:4248628): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003135392E36352E34332E313932002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674660996.699:4248629): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674660996.699:4248629): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1d03857010 items=0 ppid=10409 pid=10429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674660996.699:4248629): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003135392E36352E34332E313932002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674660996.717:4248630): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660996.717:4248631): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660996.717:4248632): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10431 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660996.721:4248633): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10431 suid=74 rport=45462 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674660996.721:4248634): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10431 suid=74 rport=45462 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=? res=success'
type=USER_AUTH msg=audit(1674660996.874:4248635): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.16.202.187 addr=103.16.202.187 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674660998.938:4248636): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674660998.950:4248637): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10431 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660998.950:4248638): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10431 suid=74 rport=45462 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660998.952:4248639): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660998.952:4248640): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674660998.952:4248641): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10428 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674660998.952:4248642): pid=10428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.16.202.187 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674661001.236:4248643): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661001.236:4248643): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7831133010 items=0 ppid=10456 pid=10459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661001.236:4248643): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674661001.242:4248644): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674661001.242:4248644): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb14a1e2010 items=0 ppid=10456 pid=10460 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661001.242:4248644): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674661001.247:4248645): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661001.247:4248645): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f85ec94b010 items=0 ppid=10456 pid=10461 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661001.247:4248645): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674661001.253:4248646): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674661001.253:4248646): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1f48099010 items=0 ppid=10456 pid=10462 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661001.253:4248646): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674661001.581:4248647): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661001.581:4248647): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8c31d0e010 items=0 ppid=10456 pid=10470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661001.581:4248647): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131362E39322E3231332E313134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661001.587:4248648): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674661001.587:4248648): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f231e628010 items=0 ppid=10456 pid=10471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661001.587:4248648): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131362E39322E3231332E313134002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674661001.592:4248649): table=filter family=2 entries=1033
type=SYSCALL msg=audit(1674661001.592:4248649): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7dbee80010 items=0 ppid=10456 pid=10472 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661001.592:4248649): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130332E31362E3230322E313837002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661001.597:4248650): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674661001.597:4248650): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0103f7d010 items=0 ppid=10456 pid=10473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661001.597:4248650): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130332E31362E3230322E313837002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674661016.221:4248651): pid=10526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661016.221:4248652): pid=10526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661016.221:4248653): pid=10526 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10526 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661016.364:4248654): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10526 suid=74 rport=53492 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661016.364:4248655): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10526 suid=74 rport=53492 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=? res=success'
type=USER_AUTH msg=audit(1674661017.062:4248656): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=51.75.124.212 addr=51.75.124.212 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674661018.675:4248657): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674661018.821:4248658): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10526 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661018.821:4248659): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10526 suid=74 rport=53492 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661018.823:4248660): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661018.823:4248661): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661018.823:4248662): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10525 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674661018.823:4248663): pid=10525 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.75.124.212 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674661019.394:4248664): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661019.394:4248665): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661019.394:4248666): pid=10540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661019.604:4248667): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=10540 suid=74 rport=15863 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661019.604:4248668): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=10540 suid=74 rport=15863 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=NETFILTER_CFG msg=audit(1674661020.535:4248669): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661020.535:4248669): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6b917d1010 items=0 ppid=10544 pid=10549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661020.535:4248669): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232312E362E36392E323236002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543135
type=USER_ACCT msg=audit(1674661021.121:4248670): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661021.122:4248671): pid=10560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661021.123:4248672): pid=10560 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258061 res=1
type=USER_START msg=audit(1674661021.150:4248673): pid=10560 uid=0 auid=1055 ses=258061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661021.153:4248674): pid=10560 uid=0 auid=1055 ses=258061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674661021.252:4248675): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661021.252:4248675): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f967f43d010 items=0 ppid=10559 pid=10572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661021.252:4248675): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674661021.258:4248676): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661021.258:4248676): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff76ab17010 items=0 ppid=10559 pid=10573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661021.258:4248676): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674661021.263:4248677): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674661021.263:4248677): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f32e04e7010 items=0 ppid=10559 pid=10574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661021.263:4248677): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674661021.269:4248678): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661021.269:4248678): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f82c4ba2010 items=0 ppid=10559 pid=10575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661021.269:4248678): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=CRED_DISP msg=audit(1674661021.519:4248679): pid=10560 uid=0 auid=1055 ses=258061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661021.522:4248680): pid=10560 uid=0 auid=1055 ses=258061 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674661021.719:4248681): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674661021.757:4248682): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661021.757:4248682): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f175f42a010 items=0 ppid=10559 pid=10585 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661021.757:4248682): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132312E3133392E38332E3337002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661021.767:4248683): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661021.767:4248683): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ffbe3074010 items=0 ppid=10559 pid=10586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661021.767:4248683): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132312E3133392E38332E3337002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674661021.776:4248684): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674661021.776:4248684): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f057d7c7010 items=0 ppid=10559 pid=10587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661021.776:4248684): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035312E37352E3132342E323132002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661021.785:4248685): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661021.785:4248685): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fccba6b6010 items=0 ppid=10559 pid=10588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661021.785:4248685): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035312E37352E3132342E323132002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674661023.217:4248686): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674661023.749:4248687): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661023.749:4248688): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661023.749:4248689): pid=10601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661023.882:4248690): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10540 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661023.882:4248691): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10540 suid=74 rport=15863 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661023.882:4248692): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10601 suid=74 rport=39068 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661023.882:4248693): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10601 suid=74 rport=39068 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661023.883:4248694): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661023.884:4248695): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661023.884:4248696): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674661023.884:4248697): pid=10534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674661026.906:4248698): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.88.240.2 addr=103.88.240.2 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674661029.423:4248699): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674661029.559:4248700): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10601 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661029.559:4248701): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10601 suid=74 rport=39068 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661029.560:4248702): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661029.560:4248703): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661029.560:4248704): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10600 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674661029.560:4248705): pid=10600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.88.240.2 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674661031.166:4248706): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661031.166:4248706): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff8dc351010 items=0 ppid=10625 pid=10630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661031.166:4248706): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674661031.171:4248707): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661031.171:4248707): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa00feb0010 items=0 ppid=10625 pid=10631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661031.171:4248707): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674661031.175:4248708): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674661031.175:4248708): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb3b2594010 items=0 ppid=10625 pid=10632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661031.175:4248708): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674661031.179:4248709): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661031.179:4248709): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f47f894e010 items=0 ppid=10625 pid=10633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661031.179:4248709): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674661031.481:4248710): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661031.481:4248710): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb5798f4010 items=0 ppid=10625 pid=10641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661031.481:4248710): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003230392E3134312E34362E3139002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661031.487:4248711): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661031.487:4248711): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbdce0d1010 items=0 ppid=10625 pid=10642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661031.487:4248711): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003230392E3134312E34362E3139002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674661031.494:4248712): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674661031.494:4248712): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f503d86e010 items=0 ppid=10625 pid=10643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661031.494:4248712): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130332E38382E3234302E32002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661031.500:4248713): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661031.500:4248713): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f624e212010 items=0 ppid=10625 pid=10644 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661031.500:4248713): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130332E38382E3234302E32002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674661049.846:4248714): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661049.846:4248715): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661049.846:4248716): pid=10724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661050.067:4248717): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=10724 suid=74 rport=33989 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.32.100.231 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661050.067:4248718): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=10724 suid=74 rport=33989 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.32.100.231 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661050.343:4248719): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10724 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661050.343:4248720): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661050.344:4248721): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661050.344:4248722): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674661050.344:4248723): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.32.100.231 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674661081.542:4248724): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661081.542:4248725): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661081.544:4248726): pid=10942 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258062 res=1
type=USER_START msg=audit(1674661081.562:4248727): pid=10942 uid=0 auid=1055 ses=258062 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661081.564:4248728): pid=10942 uid=0 auid=1055 ses=258062 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661081.916:4248729): pid=10942 uid=0 auid=1055 ses=258062 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661081.918:4248730): pid=10942 uid=0 auid=1055 ses=258062 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674661087.348:4248731): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661087.349:4248732): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661087.349:4248733): pid=10969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10969 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661087.357:4248734): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10969 suid=74 rport=51166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661087.357:4248735): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=10969 suid=74 rport=51166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=? res=success'
type=USER_AUTH msg=audit(1674661087.521:4248736): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=183.82.117.42 addr=183.82.117.42 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674661089.746:4248737): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674661089.757:4248738): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10969 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661089.757:4248739): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10969 suid=74 rport=51166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661089.759:4248740): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661089.759:4248741): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661089.759:4248742): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674661089.759:4248743): pid=10968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=183.82.117.42 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674661091.190:4248744): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661091.190:4248744): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbcec8f2010 items=0 ppid=10987 pid=10990 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661091.190:4248744): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674661091.194:4248745): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661091.194:4248745): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe5e0cb0010 items=0 ppid=10987 pid=10991 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661091.194:4248745): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674661091.198:4248746): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674661091.198:4248746): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe4181ae010 items=0 ppid=10987 pid=10992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661091.198:4248746): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674661091.203:4248747): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661091.203:4248747): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f082b75f010 items=0 ppid=10987 pid=10993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661091.203:4248747): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674661091.521:4248748): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661091.521:4248748): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9884d6a010 items=0 ppid=10987 pid=11001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661091.521:4248748): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730038352E32392E3133352E3231002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661091.528:4248749): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661091.528:4248749): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1fe8f28010 items=0 ppid=10987 pid=11002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661091.528:4248749): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640038352E32392E3133352E3231002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674661091.534:4248750): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674661091.534:4248750): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3e62ace010 items=0 ppid=10987 pid=11003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661091.534:4248750): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138332E38322E3131372E3432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661091.540:4248751): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661091.540:4248751): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2317a1e010 items=0 ppid=10987 pid=11004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661091.540:4248751): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138332E38322E3131372E3432002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674661104.420:4248752): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661104.421:4248753): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661104.421:4248754): pid=11047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661104.577:4248755): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=11047 suid=74 rport=52470 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.125.67.35 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661104.577:4248756): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=11047 suid=74 rport=52470 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.125.67.35 terminal=? res=success'
type=USER_AUTH msg=audit(1674661105.322:4248757): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=211.125.67.35 addr=211.125.67.35 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674661106.379:4248758): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661106.379:4248758): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8a10886010 items=0 ppid=11081 pid=11084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661106.379:4248758): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674661106.384:4248759): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661106.384:4248759): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdf7322b010 items=0 ppid=11081 pid=11085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661106.384:4248759): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674661106.390:4248760): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674661106.390:4248760): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feeb92ad010 items=0 ppid=11081 pid=11086 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661106.390:4248760): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674661106.395:4248761): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661106.395:4248761): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7ee39e4010 items=0 ppid=11081 pid=11087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661106.395:4248761): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674661106.718:4248762): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661106.718:4248762): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7faddb65b010 items=0 ppid=11081 pid=11098 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661106.718:4248762): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730032342E3139392E3130342E313431002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661106.723:4248763): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661106.723:4248763): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe65be5f010 items=0 ppid=11081 pid=11099 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661106.723:4248763): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640032342E3139392E3130342E313431002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674661106.729:4248764): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674661106.729:4248764): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f826e318010 items=0 ppid=11081 pid=11100 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661106.729:4248764): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003231312E3132352E36372E3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661106.734:4248765): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661106.734:4248765): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1e1d4cd010 items=0 ppid=11081 pid=11101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661106.734:4248765): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003231312E3132352E36372E3335002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674661107.016:4248766): pid=11046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=211.125.67.35 terminal=ssh res=failed'
type=AVC msg=audit(1674661132.118:4248767): avc: denied { read } for pid=11179 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674661132.118:4248767): avc: denied { open } for pid=11179 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661132.118:4248767): arch=c000003e syscall=2 success=yes exit=18 a0=5590cee67f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=11179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661132.118:4248767): proctitle="dovecot/auth"
type=AVC msg=audit(1674661132.118:4248768): avc: denied { getattr } for pid=11179 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661132.118:4248768): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd6c0ff470 a2=7ffd6c0ff470 a3=fffffc00 items=0 ppid=5547 pid=11179 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661132.118:4248768): proctitle="dovecot/auth"
type=AVC msg=audit(1674661134.188:4248769): avc: denied { name_connect } for pid=11179 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674661134.188:4248769): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd6c0ff260 a2=10 a3=7ffd6c0ff25c items=0 ppid=5547 pid=11179 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661134.188:4248769): proctitle="dovecot/auth"
type=AVC msg=audit(1674661134.217:4248770): avc: denied { write } for pid=11191 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674661134.217:4248770): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe470e0420 a2=6e a3=63d14d0e items=0 ppid=5547 pid=11191 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661134.217:4248770): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674661141.938:4248771): pid=11217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661141.938:4248772): pid=11216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661141.939:4248773): pid=11216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661141.939:4248774): pid=11217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661141.939:4248775): pid=11216 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258063 res=1
type=LOGIN msg=audit(1674661141.939:4248776): pid=11217 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258064 res=1
type=USER_START msg=audit(1674661142.023:4248777): pid=11216 uid=0 auid=0 ses=258063 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674661142.023:4248778): pid=11217 uid=0 auid=1055 ses=258064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661142.024:4248779): pid=11217 uid=0 auid=1055 ses=258064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661142.025:4248780): pid=11216 uid=0 auid=0 ses=258063 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661142.376:4248781): pid=11217 uid=0 auid=1055 ses=258064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661142.380:4248782): pid=11217 uid=0 auid=1055 ses=258064 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661143.167:4248783): pid=11216 uid=0 auid=0 ses=258063 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661143.169:4248784): pid=11216 uid=0 auid=0 ses=258063 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674661167.176:4248785): pid=11328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661167.176:4248786): pid=11328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661167.176:4248787): pid=11328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11328 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661167.235:4248788): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=11328 suid=74 rport=37752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661167.235:4248789): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=11328 suid=74 rport=37752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=? res=success'
type=USER_AUTH msg=audit(1674661167.625:4248790): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=211.25.1.20 addr=211.25.1.20 terminal=ssh res=failed'
type=AVC msg=audit(1674661168.394:4248791): avc: denied { name_connect } for pid=11179 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674661168.394:4248791): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd6c0ff260 a2=10 a3=7ffd6c0ff25c items=0 ppid=5547 pid=11179 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661168.394:4248791): proctitle="dovecot/auth"
type=USER_AUTH msg=audit(1674661169.500:4248792): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674661169.559:4248793): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11328 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661169.559:4248794): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11328 suid=74 rport=37752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661169.560:4248795): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661169.560:4248796): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661169.560:4248797): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11327 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674661169.560:4248798): pid=11327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=211.25.1.20 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674661171.268:4248799): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661171.268:4248799): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5eae6a5010 items=0 ppid=11346 pid=11349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661171.268:4248799): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674661171.273:4248800): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661171.273:4248800): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8dea45a010 items=0 ppid=11346 pid=11350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661171.273:4248800): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674661171.276:4248801): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674661171.276:4248801): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f85cb139010 items=0 ppid=11346 pid=11351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661171.276:4248801): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674661171.280:4248802): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661171.280:4248802): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7f31417010 items=0 ppid=11346 pid=11352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661171.280:4248802): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674661171.592:4248803): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661171.592:4248803): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe5f21c4010 items=0 ppid=11346 pid=11362 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661171.592:4248803): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138352E37342E342E313839002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661171.598:4248804): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661171.598:4248804): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f48c2710010 items=0 ppid=11346 pid=11363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661171.598:4248804): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138352E37342E342E313839002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674661171.604:4248805): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674661171.604:4248805): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7395c5f010 items=0 ppid=11346 pid=11364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661171.604:4248805): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003231312E32352E312E3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661171.609:4248806): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661171.609:4248806): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3ef1e32010 items=0 ppid=11346 pid=11365 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661171.609:4248806): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003231312E32352E312E3230002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674661187.234:4248807): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661187.234:4248807): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b67a666b010 items=0 ppid=11421 pid=11426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661187.234:4248807): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3137332E37312E323030002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674661201.186:4248808): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661201.186:4248809): pid=11461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661201.186:4248810): pid=11462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661201.186:4248811): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661201.186:4248812): pid=11461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661201.186:4248813): pid=11462 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661201.188:4248814): pid=11460 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258065 res=1
type=LOGIN msg=audit(1674661201.188:4248815): pid=11461 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258066 res=1
type=LOGIN msg=audit(1674661201.188:4248816): pid=11462 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258067 res=1
type=USER_START msg=audit(1674661201.233:4248817): pid=11462 uid=0 auid=1055 ses=258067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674661201.233:4248818): pid=11460 uid=0 auid=0 ses=258065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674661201.233:4248819): pid=11461 uid=0 auid=0 ses=258066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661201.235:4248820): pid=11461 uid=0 auid=0 ses=258066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661201.236:4248821): pid=11462 uid=0 auid=1055 ses=258067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661201.236:4248822): pid=11460 uid=0 auid=0 ses=258065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661201.264:4248823): pid=11460 uid=0 auid=0 ses=258065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661201.271:4248824): pid=11460 uid=0 auid=0 ses=258065 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661201.576:4248825): pid=11462 uid=0 auid=1055 ses=258067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661201.593:4248826): pid=11462 uid=0 auid=1055 ses=258067 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661204.602:4248827): pid=11461 uid=0 auid=0 ses=258066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661204.604:4248828): pid=11461 uid=0 auid=0 ses=258066 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674661208.701:4248829): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661208.701:4248830): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661208.701:4248831): pid=11505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11505 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661208.883:4248832): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=11505 suid=74 rport=56910 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674661208.883:4248833): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=11505 suid=74 rport=56910 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=? res=success'
type=USER_AUTH msg=audit(1674661209.761:4248834): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=46.150.0.56 addr=46.150.0.56 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674661211.400:4248835): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674661211.586:4248836): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11505 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661211.586:4248837): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11505 suid=74 rport=56910 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661211.587:4248838): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661211.587:4248839): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674661211.587:4248840): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674661211.587:4248841): pid=11504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=46.150.0.56 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674661211.707:4248842): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674661211.707:4248842): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1ed6192010 items=0 ppid=11516 pid=11519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661211.707:4248842): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674661211.711:4248843): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674661211.711:4248843): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f143573b010 items=0 ppid=11516 pid=11520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661211.711:4248843): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674661211.715:4248844): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674661211.715:4248844): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efc8b2e6010 items=0 ppid=11516 pid=11521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661211.715:4248844): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674661211.719:4248845): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674661211.719:4248845): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8b36b6c010 items=0 ppid=11516 pid=11522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661211.719:4248845): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674661212.066:4248846): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674661212.066:4248846): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8379426010 items=0 ppid=11516 pid=11533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661212.066:4248846): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003231302E35362E32352E313031002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661212.074:4248847): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661212.074:4248847): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9e0843c010 items=0 ppid=11516 pid=11534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661212.074:4248847): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003231302E35362E32352E313031002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674661212.081:4248848): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674661212.081:4248848): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5ea244d010 items=0 ppid=11516 pid=11535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661212.081:4248848): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034362E3135302E302E3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674661212.089:4248849): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674661212.089:4248849): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3c687c0010 items=0 ppid=11516 pid=11536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661212.089:4248849): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034362E3135302E302E3536002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674661261.623:4248850): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661261.623:4248851): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661261.625:4248852): pid=11701 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258068 res=1
type=USER_START msg=audit(1674661261.643:4248853): pid=11701 uid=0 auid=1055 ses=258068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661261.645:4248854): pid=11701 uid=0 auid=1055 ses=258068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661261.967:4248855): pid=11701 uid=0 auid=1055 ses=258068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661261.969:4248856): pid=11701 uid=0 auid=1055 ses=258068 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661321.993:4248857): pid=11907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661321.994:4248858): pid=11907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661321.994:4248859): pid=11907 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258069 res=1
type=USER_START msg=audit(1674661322.012:4248860): pid=11907 uid=0 auid=1055 ses=258069 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661322.017:4248861): pid=11907 uid=0 auid=1055 ses=258069 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661322.325:4248862): pid=11907 uid=0 auid=1055 ses=258069 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661322.327:4248863): pid=11907 uid=0 auid=1055 ses=258069 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674661370.071:4248864): avc: denied { read } for pid=12085 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674661370.071:4248864): avc: denied { open } for pid=12085 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661370.071:4248864): arch=c000003e syscall=2 success=yes exit=18 a0=55c9ab663f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661370.071:4248864): proctitle="dovecot/auth"
type=AVC msg=audit(1674661370.071:4248865): avc: denied { getattr } for pid=12085 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661370.071:4248865): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcff91bc30 a2=7ffcff91bc30 a3=fffffc00 items=0 ppid=5547 pid=12085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661370.071:4248865): proctitle="dovecot/auth"
type=AVC msg=audit(1674661370.579:4248866): avc: denied { name_connect } for pid=12085 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674661370.579:4248866): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcff91ba20 a2=10 a3=7ffcff91ba1c items=0 ppid=5547 pid=12085 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661370.579:4248866): proctitle="dovecot/auth"
type=AVC msg=audit(1674661370.615:4248867): avc: denied { write } for pid=12114 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674661370.615:4248867): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc7d4789b0 a2=6e a3=63d14dfa items=0 ppid=5547 pid=12114 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661370.615:4248867): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674661381.347:4248868): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661381.347:4248869): pid=12201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661381.348:4248870): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661381.348:4248871): pid=12201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661381.350:4248872): pid=12201 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258070 res=1
type=LOGIN msg=audit(1674661381.350:4248873): pid=12200 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258071 res=1
type=USER_START msg=audit(1674661381.392:4248874): pid=12201 uid=0 auid=1055 ses=258070 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674661381.394:4248875): pid=12200 uid=0 auid=0 ses=258071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661381.394:4248876): pid=12201 uid=0 auid=1055 ses=258070 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661381.396:4248877): pid=12200 uid=0 auid=0 ses=258071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661381.462:4248878): pid=12200 uid=0 auid=0 ses=258071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661381.464:4248879): pid=12200 uid=0 auid=0 ses=258071 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661381.743:4248880): pid=12201 uid=0 auid=1055 ses=258070 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661381.746:4248881): pid=12201 uid=0 auid=1055 ses=258070 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661441.761:4248882): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661441.762:4248883): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661441.762:4248884): pid=12400 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258072 res=1
type=USER_START msg=audit(1674661441.774:4248885): pid=12400 uid=0 auid=1055 ses=258072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661441.776:4248886): pid=12400 uid=0 auid=1055 ses=258072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661442.043:4248887): pid=12400 uid=0 auid=1055 ses=258072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661442.054:4248888): pid=12400 uid=0 auid=1055 ses=258072 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661501.070:4248889): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661501.070:4248890): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661501.071:4248891): pid=12582 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258073 res=1
type=USER_ACCT msg=audit(1674661501.090:4248892): pid=12581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661501.090:4248893): pid=12581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661501.090:4248894): pid=12581 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258074 res=1
type=USER_START msg=audit(1674661501.096:4248895): pid=12582 uid=0 auid=1055 ses=258073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661501.097:4248896): pid=12582 uid=0 auid=1055 ses=258073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674661501.128:4248897): pid=12581 uid=0 auid=0 ses=258074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661501.129:4248898): pid=12581 uid=0 auid=0 ses=258074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661501.477:4248899): pid=12582 uid=0 auid=1055 ses=258073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661501.487:4248900): pid=12582 uid=0 auid=1055 ses=258073 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661504.620:4248901): pid=12581 uid=0 auid=0 ses=258074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661504.622:4248902): pid=12581 uid=0 auid=0 ses=258074 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674661522.404:4248903): avc: denied { read } for pid=12653 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674661522.404:4248903): avc: denied { open } for pid=12653 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661522.404:4248903): arch=c000003e syscall=2 success=yes exit=18 a0=560340662f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=12653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661522.404:4248903): proctitle="dovecot/auth"
type=AVC msg=audit(1674661522.404:4248904): avc: denied { getattr } for pid=12653 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661522.404:4248904): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd7ba45740 a2=7ffd7ba45740 a3=fffffc00 items=0 ppid=5547 pid=12653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661522.404:4248904): proctitle="dovecot/auth"
type=AVC msg=audit(1674661524.697:4248905): avc: denied { name_connect } for pid=12653 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674661524.697:4248905): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd7ba45530 a2=10 a3=7ffd7ba4552c items=0 ppid=5547 pid=12653 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661524.697:4248905): proctitle="dovecot/auth"
type=AVC msg=audit(1674661524.728:4248906): avc: denied { write } for pid=12661 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674661524.728:4248906): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe976435c0 a2=6e a3=63d14e94 items=0 ppid=5547 pid=12661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661524.728:4248906): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674661561.643:4248907): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661561.643:4248908): pid=12794 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661561.644:4248909): pid=12794 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258075 res=1
type=USER_START msg=audit(1674661561.664:4248910): pid=12794 uid=0 auid=1055 ses=258075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661561.666:4248911): pid=12794 uid=0 auid=1055 ses=258075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661562.031:4248912): pid=12794 uid=0 auid=1055 ses=258075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661562.033:4248913): pid=12794 uid=0 auid=1055 ses=258075 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674661563.446:4248914): avc: denied { write } for pid=12661 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674661563.446:4248914): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe976435c0 a2=6e a3=63d14ebb items=0 ppid=5547 pid=12661 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661563.446:4248914): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674661563.875:4248915): avc: denied { read append } for pid=12814 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674661563.875:4248915): avc: denied { open } for pid=12814 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661563.875:4248915): arch=c000003e syscall=2 success=yes exit=8 a0=562967e36a60 a1=402 a2=7ffd509edbc0 a3=7ffd509ed660 items=0 ppid=5547 pid=12814 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661563.875:4248915): proctitle="dovecot/imap"
type=AVC msg=audit(1674661563.875:4248916): avc: denied { getattr } for pid=12814 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661563.875:4248916): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffd509edb20 a2=7ffd509edb20 a3=7ffd509ed5a0 items=0 ppid=5547 pid=12814 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661563.875:4248916): proctitle="dovecot/imap"
type=AVC msg=audit(1674661563.875:4248917): avc: denied { write } for pid=12814 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661563.875:4248917): arch=c000003e syscall=2 success=yes exit=10 a0=562967e3b990 a1=2 a2=7ffd509ed8c0 a3=7ffd509ed360 items=0 ppid=5547 pid=12814 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661563.875:4248917): proctitle="dovecot/imap"
type=AVC msg=audit(1674661563.875:4248918): avc: denied { lock } for pid=12814 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661563.875:4248918): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffd509ed7c0 a3=63d14ebb items=0 ppid=5547 pid=12814 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661563.875:4248918): proctitle="dovecot/imap"
type=AVC msg=audit(1674661563.875:4248919): avc: denied { read } for pid=12814 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674661563.875:4248919): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=562967e64300 a2=90800 a3=0 items=0 ppid=5547 pid=12814 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661563.875:4248919): proctitle="dovecot/imap"
type=AVC msg=audit(1674661563.876:4248920): avc: denied { getattr } for pid=12814 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661563.876:4248920): arch=c000003e syscall=4 success=yes exit=0 a0=562967e26a60 a1=7ffd509edb70 a2=7ffd509edb70 a3=6f632e6f72676173 items=0 ppid=5547 pid=12814 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661563.876:4248920): proctitle="dovecot/imap"
type=AVC msg=audit(1674661565.619:4248921): avc: denied { write } for pid=12822 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674661565.619:4248921): arch=c000003e syscall=21 success=yes exit=0 a0=5622d15d04c0 a1=2 a2=7b48 a3=7ffd51767620 items=0 ppid=5547 pid=12822 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661565.619:4248921): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674661621.049:4248922): pid=12994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661621.050:4248923): pid=12994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661621.050:4248924): pid=12994 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258076 res=1
type=USER_START msg=audit(1674661621.066:4248925): pid=12994 uid=0 auid=1055 ses=258076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661621.067:4248926): pid=12994 uid=0 auid=1055 ses=258076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661621.322:4248927): pid=12994 uid=0 auid=1055 ses=258076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661621.324:4248928): pid=12994 uid=0 auid=1055 ses=258076 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674661674.527:4248929): avc: denied { name_connect } for pid=12653 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674661674.527:4248929): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd7ba45530 a2=10 a3=7ffd7ba4552c items=0 ppid=5547 pid=12653 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661674.527:4248929): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674661681.346:4248930): pid=13287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661681.346:4248931): pid=13287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661681.348:4248932): pid=13287 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258077 res=1
type=USER_START msg=audit(1674661681.363:4248933): pid=13287 uid=0 auid=1055 ses=258077 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661681.365:4248934): pid=13287 uid=0 auid=1055 ses=258077 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661681.614:4248935): pid=13287 uid=0 auid=1055 ses=258077 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661681.617:4248936): pid=13287 uid=0 auid=1055 ses=258077 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674661683.950:4248937): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674661683.950:4248937): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b0f037c2010 items=0 ppid=13302 pid=13307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661683.950:4248937): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3137332E3130352E323036002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674661741.634:4248938): pid=13481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661741.634:4248939): pid=13481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661741.634:4248940): pid=13481 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258078 res=1
type=USER_START msg=audit(1674661741.649:4248941): pid=13481 uid=0 auid=1055 ses=258078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661741.651:4248942): pid=13481 uid=0 auid=1055 ses=258078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661741.999:4248943): pid=13481 uid=0 auid=1055 ses=258078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661742.001:4248944): pid=13481 uid=0 auid=1055 ses=258078 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661801.014:4248945): pid=13660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661801.014:4248946): pid=13660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661801.014:4248947): pid=13663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661801.014:4248948): pid=13660 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258079 res=1
type=CRED_ACQ msg=audit(1674661801.014:4248949): pid=13663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674661801.014:4248950): pid=13661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661801.014:4248951): pid=13663 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258080 res=1
type=CRED_ACQ msg=audit(1674661801.015:4248952): pid=13661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661801.015:4248953): pid=13661 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258081 res=1
type=USER_ACCT msg=audit(1674661801.015:4248954): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661801.015:4248955): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661801.015:4248956): pid=13662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258082 res=1
type=USER_START msg=audit(1674661801.055:4248957): pid=13663 uid=0 auid=1055 ses=258080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674661801.056:4248958): pid=13660 uid=0 auid=0 ses=258079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674661801.056:4248959): pid=13661 uid=0 auid=0 ses=258081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674661801.056:4248960): pid=13662 uid=0 auid=0 ses=258082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661801.057:4248961): pid=13663 uid=0 auid=1055 ses=258080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661801.057:4248962): pid=13660 uid=0 auid=0 ses=258079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661801.057:4248963): pid=13662 uid=0 auid=0 ses=258082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661801.058:4248964): pid=13661 uid=0 auid=0 ses=258081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661801.085:4248965): pid=13660 uid=0 auid=0 ses=258079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661801.091:4248966): pid=13660 uid=0 auid=0 ses=258079 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661801.145:4248967): pid=13662 uid=0 auid=0 ses=258082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661801.147:4248968): pid=13662 uid=0 auid=0 ses=258082 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661801.357:4248969): pid=13663 uid=0 auid=1055 ses=258080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661801.359:4248970): pid=13663 uid=0 auid=1055 ses=258080 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661804.394:4248971): pid=13661 uid=0 auid=0 ses=258081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661804.396:4248972): pid=13661 uid=0 auid=0 ses=258081 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674661825.459:4248973): avc: denied { read } for pid=13751 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674661825.459:4248973): avc: denied { open } for pid=13751 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661825.459:4248973): arch=c000003e syscall=2 success=yes exit=18 a0=563c48b62f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=13751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661825.459:4248973): proctitle="dovecot/auth"
type=AVC msg=audit(1674661825.459:4248974): avc: denied { getattr } for pid=13751 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661825.459:4248974): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc60c49ba0 a2=7ffc60c49ba0 a3=fffffc00 items=0 ppid=5547 pid=13751 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661825.459:4248974): proctitle="dovecot/auth"
type=AVC msg=audit(1674661827.608:4248975): avc: denied { name_connect } for pid=13751 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674661827.608:4248975): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc60c49990 a2=10 a3=7ffc60c4998c items=0 ppid=5547 pid=13751 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661827.608:4248975): proctitle="dovecot/auth"
type=AVC msg=audit(1674661827.638:4248976): avc: denied { write } for pid=13782 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674661827.638:4248976): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc05897cc0 a2=6e a3=63d14fc3 items=0 ppid=5547 pid=13782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661827.638:4248976): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674661861.417:4248977): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661861.417:4248978): pid=13887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661861.419:4248979): pid=13887 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258083 res=1
type=USER_START msg=audit(1674661861.452:4248980): pid=13887 uid=0 auid=1055 ses=258083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661861.454:4248981): pid=13887 uid=0 auid=1055 ses=258083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661861.736:4248982): pid=13887 uid=0 auid=1055 ses=258083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661861.738:4248983): pid=13887 uid=0 auid=1055 ses=258083 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674661869.241:4248984): avc: denied { name_connect } for pid=13751 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674661869.241:4248984): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc60c49990 a2=10 a3=7ffc60c4998c items=0 ppid=5547 pid=13751 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661869.241:4248984): proctitle="dovecot/auth"
type=AVC msg=audit(1674661869.253:4248985): avc: denied { write } for pid=13782 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674661869.253:4248985): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc05897cc0 a2=6e a3=63d14fed items=0 ppid=5547 pid=13782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661869.253:4248985): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674661883.440:4248986): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674661883.440:4248986): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b211074d010 items=0 ppid=13966 pid=13971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661883.440:4248986): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131332E36392E3230392E323039002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674661921.755:4248987): pid=14103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661921.755:4248988): pid=14103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661921.756:4248989): pid=14103 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258084 res=1
type=USER_START msg=audit(1674661921.774:4248990): pid=14103 uid=0 auid=1055 ses=258084 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661921.777:4248991): pid=14103 uid=0 auid=1055 ses=258084 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661922.093:4248992): pid=14103 uid=0 auid=1055 ses=258084 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661922.095:4248993): pid=14103 uid=0 auid=1055 ses=258084 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674661975.712:4248994): avc: denied { read } for pid=14320 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674661975.712:4248994): avc: denied { open } for pid=14320 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661975.712:4248994): arch=c000003e syscall=2 success=yes exit=18 a0=562027328f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=14320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661975.712:4248994): proctitle="dovecot/auth"
type=AVC msg=audit(1674661975.712:4248995): avc: denied { getattr } for pid=14320 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674661975.712:4248995): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd90346dc0 a2=7ffd90346dc0 a3=fffffc00 items=0 ppid=5547 pid=14320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661975.712:4248995): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674661981.113:4248996): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674661981.113:4248997): pid=14419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674661981.114:4248998): pid=14419 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258085 res=1
type=USER_START msg=audit(1674661981.130:4248999): pid=14419 uid=0 auid=1055 ses=258085 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674661981.131:4249000): pid=14419 uid=0 auid=1055 ses=258085 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674661981.407:4249001): pid=14419 uid=0 auid=1055 ses=258085 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674661981.409:4249002): pid=14419 uid=0 auid=1055 ses=258085 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674661998.361:4249003): avc: denied { write } for pid=14348 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674661998.361:4249003): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcf47265e0 a2=6e a3=63d1506e items=0 ppid=5547 pid=14348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674661998.361:4249003): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674662041.422:4249004): pid=14639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662041.422:4249005): pid=14639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662041.422:4249006): pid=14639 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258086 res=1
type=USER_START msg=audit(1674662041.436:4249007): pid=14639 uid=0 auid=1055 ses=258086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662041.437:4249008): pid=14639 uid=0 auid=1055 ses=258086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662041.708:4249009): pid=14639 uid=0 auid=1055 ses=258086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662041.710:4249010): pid=14639 uid=0 auid=1055 ses=258086 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662101.724:4249011): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662101.724:4249012): pid=14838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662101.724:4249013): pid=14839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662101.725:4249014): pid=14838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662101.725:4249015): pid=14839 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258087 res=1
type=LOGIN msg=audit(1674662101.725:4249016): pid=14838 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258088 res=1
type=USER_START msg=audit(1674662101.763:4249017): pid=14839 uid=0 auid=1055 ses=258087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662101.764:4249018): pid=14839 uid=0 auid=1055 ses=258087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662101.764:4249019): pid=14838 uid=0 auid=0 ses=258088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662101.765:4249020): pid=14838 uid=0 auid=0 ses=258088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662102.135:4249021): pid=14839 uid=0 auid=1055 ses=258087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662102.150:4249022): pid=14839 uid=0 auid=1055 ses=258087 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662105.157:4249023): pid=14838 uid=0 auid=0 ses=258088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662105.158:4249024): pid=14838 uid=0 auid=0 ses=258088 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674662107.423:4249025): avc: denied { read } for pid=14882 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674662107.423:4249025): avc: denied { open } for pid=14882 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662107.423:4249025): arch=c000003e syscall=2 success=yes exit=18 a0=556293592f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=14882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662107.423:4249025): proctitle="dovecot/auth"
type=AVC msg=audit(1674662107.423:4249026): avc: denied { getattr } for pid=14882 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662107.423:4249026): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffecfe9d460 a2=7ffecfe9d460 a3=fffffc00 items=0 ppid=5547 pid=14882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662107.423:4249026): proctitle="dovecot/auth"
type=AVC msg=audit(1674662110.723:4249027): avc: denied { name_connect } for pid=14882 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674662110.723:4249027): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffecfe9d250 a2=10 a3=7ffecfe9d24c items=0 ppid=5547 pid=14882 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662110.723:4249027): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674662111.810:4249028): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674662111.810:4249028): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b663781b010 items=0 ppid=14897 pid=14902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662111.810:4249028): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131362E3133312E3134362E3432002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674662161.178:4249029): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662161.178:4249030): pid=15094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662161.180:4249031): pid=15094 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258089 res=1
type=USER_START msg=audit(1674662161.202:4249032): pid=15094 uid=0 auid=1055 ses=258089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662161.204:4249033): pid=15094 uid=0 auid=1055 ses=258089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662161.503:4249034): pid=15094 uid=0 auid=1055 ses=258089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662161.505:4249035): pid=15094 uid=0 auid=1055 ses=258089 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674662208.912:4249036): avc: denied { write } for pid=14992 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674662208.912:4249036): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd510c1930 a2=6e a3=63d15140 items=0 ppid=5547 pid=14992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662208.912:4249036): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674662221.522:4249037): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662221.522:4249038): pid=15284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662221.523:4249039): pid=15284 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258090 res=1
type=USER_START msg=audit(1674662221.538:4249040): pid=15284 uid=0 auid=1055 ses=258090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662221.539:4249041): pid=15284 uid=0 auid=1055 ses=258090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662221.837:4249042): pid=15284 uid=0 auid=1055 ses=258090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662221.839:4249043): pid=15284 uid=0 auid=1055 ses=258090 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674662251.022:4249044): avc: denied { name_connect } for pid=14882 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674662251.022:4249044): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffecfe9d250 a2=10 a3=7ffecfe9d24c items=0 ppid=5547 pid=14882 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662251.022:4249044): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674662281.865:4249045): pid=15592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662281.866:4249046): pid=15592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662281.867:4249047): pid=15592 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258091 res=1
type=USER_ACCT msg=audit(1674662281.876:4249048): pid=15591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662281.876:4249049): pid=15591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662281.876:4249050): pid=15591 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258092 res=1
type=USER_START msg=audit(1674662281.914:4249052): pid=15592 uid=0 auid=1055 ses=258091 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662281.914:4249051): pid=15591 uid=0 auid=0 ses=258092 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662281.918:4249053): pid=15592 uid=0 auid=1055 ses=258091 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662281.918:4249054): pid=15591 uid=0 auid=0 ses=258092 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662282.015:4249055): pid=15591 uid=0 auid=0 ses=258092 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662282.017:4249056): pid=15591 uid=0 auid=0 ses=258092 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662282.222:4249057): pid=15592 uid=0 auid=1055 ses=258091 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662282.224:4249058): pid=15592 uid=0 auid=1055 ses=258091 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662341.241:4249059): pid=15836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662341.242:4249060): pid=15836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662341.242:4249061): pid=15836 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258093 res=1
type=USER_START msg=audit(1674662341.260:4249062): pid=15836 uid=0 auid=1055 ses=258093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662341.261:4249063): pid=15836 uid=0 auid=1055 ses=258093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662341.566:4249064): pid=15836 uid=0 auid=1055 ses=258093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662341.568:4249065): pid=15836 uid=0 auid=1055 ses=258093 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674662377.546:4249066): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674662377.546:4249066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab449b82010 items=0 ppid=16010 pid=16015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662377.546:4249066): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232332E38342E3234392E313936002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674662383.630:4249067): avc: denied { write } for pid=16040 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674662383.630:4249067): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffce782e490 a2=6e a3=63d151ef items=0 ppid=5547 pid=16040 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662383.630:4249067): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674662401.598:4249068): pid=16099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662401.598:4249069): pid=16099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662401.598:4249070): pid=16099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258094 res=1
type=USER_ACCT msg=audit(1674662401.605:4249071): pid=16101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662401.605:4249072): pid=16101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662401.605:4249073): pid=16101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258095 res=1
type=USER_ACCT msg=audit(1674662401.631:4249074): pid=16102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662401.631:4249075): pid=16102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662401.631:4249076): pid=16102 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258096 res=1
type=USER_ACCT msg=audit(1674662401.644:4249077): pid=16100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662401.644:4249078): pid=16100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662401.644:4249079): pid=16100 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258097 res=1
type=USER_START msg=audit(1674662401.825:4249080): pid=16102 uid=0 auid=1055 ses=258096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662401.825:4249081): pid=16099 uid=0 auid=0 ses=258094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662401.833:4249082): pid=16101 uid=0 auid=0 ses=258095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662401.833:4249083): pid=16100 uid=0 auid=0 ses=258097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662401.853:4249084): pid=16099 uid=0 auid=0 ses=258094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662401.854:4249085): pid=16100 uid=0 auid=0 ses=258097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662401.855:4249086): pid=16102 uid=0 auid=1055 ses=258096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662401.860:4249087): pid=16101 uid=0 auid=0 ses=258095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662401.995:4249088): pid=16099 uid=0 auid=0 ses=258094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662402.082:4249089): pid=16099 uid=0 auid=0 ses=258094 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662402.258:4249090): pid=16100 uid=0 auid=0 ses=258097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662402.284:4249091): pid=16100 uid=0 auid=0 ses=258097 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662402.453:4249092): pid=16102 uid=0 auid=1055 ses=258096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662402.457:4249093): pid=16102 uid=0 auid=1055 ses=258096 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662405.490:4249094): pid=16101 uid=0 auid=0 ses=258095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662405.491:4249095): pid=16101 uid=0 auid=0 ses=258095 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674662425.029:4249096): avc: denied { name_connect } for pid=14882 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674662425.029:4249096): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffecfe9d250 a2=10 a3=7ffecfe9d24c items=0 ppid=5547 pid=14882 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662425.029:4249096): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674662426.124:4249097): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674662426.124:4249097): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6a9053e010 items=0 ppid=16233 pid=16238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662426.124:4249097): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003139342E38372E3230302E313538002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674662431.918:4249098): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674662431.918:4249098): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbc08577010 items=0 ppid=16260 pid=16263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662431.918:4249098): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674662431.922:4249099): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674662431.922:4249099): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1a178f7010 items=0 ppid=16260 pid=16264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662431.922:4249099): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674662431.926:4249100): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674662431.926:4249100): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa06f6a5010 items=0 ppid=16260 pid=16265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662431.926:4249100): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674662431.930:4249101): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674662431.930:4249101): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5b9dc74010 items=0 ppid=16260 pid=16266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662431.930:4249101): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674662432.242:4249102): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674662432.242:4249102): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbc7c0e5010 items=0 ppid=16260 pid=16274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662432.242:4249102): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730039372E36342E32322E3633002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674662432.247:4249103): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674662432.247:4249103): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3f2ae2c010 items=0 ppid=16260 pid=16275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662432.247:4249103): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640039372E36342E32322E3633002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674662432.252:4249104): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674662432.252:4249104): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4ddfd97010 items=0 ppid=16260 pid=16276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662432.252:4249104): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003139342E38372E3230302E313538002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674662432.257:4249105): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674662432.257:4249105): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc455665010 items=0 ppid=16260 pid=16277 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662432.257:4249105): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003139342E38372E3230302E313538002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674662461.525:4249106): pid=16394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662461.525:4249107): pid=16395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662461.529:4249108): pid=16394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662461.529:4249109): pid=16395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662461.530:4249110): pid=16394 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258098 res=1
type=LOGIN msg=audit(1674662461.530:4249111): pid=16395 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258099 res=1
type=USER_START msg=audit(1674662461.637:4249112): pid=16395 uid=0 auid=1055 ses=258099 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662461.637:4249113): pid=16394 uid=0 auid=0 ses=258098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662461.638:4249114): pid=16394 uid=0 auid=0 ses=258098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662461.641:4249115): pid=16395 uid=0 auid=1055 ses=258099 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662461.691:4249116): pid=16394 uid=0 auid=0 ses=258098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662461.700:4249117): pid=16394 uid=0 auid=0 ses=258098 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662462.039:4249118): pid=16395 uid=0 auid=1055 ses=258099 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662462.041:4249119): pid=16395 uid=0 auid=1055 ses=258099 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674662474.917:4249120): avc: denied { name_connect } for pid=14882 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674662474.917:4249120): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffecfe9d250 a2=10 a3=7ffecfe9d24c items=0 ppid=5547 pid=14882 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662474.917:4249120): proctitle="dovecot/auth"
type=AVC msg=audit(1674662474.947:4249121): avc: denied { write } for pid=16458 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674662474.947:4249121): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff373f06f0 a2=6e a3=63d1524a items=0 ppid=5547 pid=16458 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662474.947:4249121): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674662475.327:4249122): avc: denied { read append } for pid=16460 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674662475.327:4249122): avc: denied { open } for pid=16460 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662475.327:4249122): arch=c000003e syscall=2 success=yes exit=8 a0=55e154645a60 a1=402 a2=7ffda340cac0 a3=7ffda340c560 items=0 ppid=5547 pid=16460 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662475.327:4249122): proctitle="dovecot/imap"
type=AVC msg=audit(1674662475.327:4249123): avc: denied { getattr } for pid=16460 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662475.327:4249123): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffda340ca20 a2=7ffda340ca20 a3=7ffda340c4a0 items=0 ppid=5547 pid=16460 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662475.327:4249123): proctitle="dovecot/imap"
type=AVC msg=audit(1674662475.327:4249124): avc: denied { write } for pid=16460 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662475.327:4249124): arch=c000003e syscall=2 success=yes exit=10 a0=55e15464a960 a1=2 a2=7ffda340c7c0 a3=7ffda340c260 items=0 ppid=5547 pid=16460 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662475.327:4249124): proctitle="dovecot/imap"
type=AVC msg=audit(1674662475.328:4249125): avc: denied { lock } for pid=16460 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662475.328:4249125): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffda340c6c0 a3=63d1524b items=0 ppid=5547 pid=16460 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662475.328:4249125): proctitle="dovecot/imap"
type=AVC msg=audit(1674662475.328:4249126): avc: denied { read } for pid=16460 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674662475.328:4249126): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55e154673300 a2=90800 a3=0 items=0 ppid=5547 pid=16460 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662475.328:4249126): proctitle="dovecot/imap"
type=AVC msg=audit(1674662475.328:4249127): avc: denied { getattr } for pid=16460 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662475.328:4249127): arch=c000003e syscall=4 success=yes exit=0 a0=55e154635a60 a1=7ffda340ca70 a2=7ffda340ca70 a3=6f632e6f72676173 items=0 ppid=5547 pid=16460 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662475.328:4249127): proctitle="dovecot/imap"
type=AVC msg=audit(1674662477.974:4249128): avc: denied { write } for pid=16469 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674662477.974:4249128): arch=c000003e syscall=21 success=yes exit=0 a0=55da0d4de4c0 a1=2 a2=7b48 a3=7fff5a33f060 items=0 ppid=5547 pid=16469 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662477.974:4249128): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674662521.060:4249129): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662521.060:4249130): pid=16645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662521.061:4249131): pid=16645 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258100 res=1
type=USER_START msg=audit(1674662521.076:4249132): pid=16645 uid=0 auid=1055 ses=258100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662521.079:4249133): pid=16645 uid=0 auid=1055 ses=258100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662521.365:4249134): pid=16645 uid=0 auid=1055 ses=258100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662521.369:4249135): pid=16645 uid=0 auid=1055 ses=258100 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674662527.066:4249136): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674662527.066:4249136): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b38015c3010 items=0 ppid=16673 pid=16678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662527.066:4249136): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3137312E3133372E323235002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674662581.386:4249137): pid=16879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662581.386:4249138): pid=16879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662581.386:4249139): pid=16879 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258101 res=1
type=USER_START msg=audit(1674662581.401:4249140): pid=16879 uid=0 auid=1055 ses=258101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662581.402:4249141): pid=16879 uid=0 auid=1055 ses=258101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662581.695:4249142): pid=16879 uid=0 auid=1055 ses=258101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662581.697:4249143): pid=16879 uid=0 auid=1055 ses=258101 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674662603.270:4249144): avc: denied { read } for pid=16971 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674662603.270:4249144): avc: denied { open } for pid=16971 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662603.270:4249144): arch=c000003e syscall=2 success=yes exit=18 a0=5561f1313f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=16971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662603.270:4249144): proctitle="dovecot/auth"
type=AVC msg=audit(1674662603.270:4249145): avc: denied { getattr } for pid=16971 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662603.270:4249145): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc22866c30 a2=7ffc22866c30 a3=fffffc00 items=0 ppid=5547 pid=16971 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662603.270:4249145): proctitle="dovecot/auth"
type=AVC msg=audit(1674662603.767:4249146): avc: denied { name_connect } for pid=16971 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674662603.767:4249146): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc22866a20 a2=10 a3=7ffc22866a1c items=0 ppid=5547 pid=16971 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662603.767:4249146): proctitle="dovecot/auth"
type=AVC msg=audit(1674662603.805:4249147): avc: denied { write } for pid=17000 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674662603.805:4249147): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb3126100 a2=6e a3=63d152cb items=0 ppid=5547 pid=17000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662603.805:4249147): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674662641.727:4249148): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662641.728:4249149): pid=17189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662641.729:4249150): pid=17189 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258102 res=1
type=USER_START msg=audit(1674662641.743:4249151): pid=17189 uid=0 auid=1055 ses=258102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662641.745:4249152): pid=17189 uid=0 auid=1055 ses=258102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662642.052:4249153): pid=17189 uid=0 auid=1055 ses=258102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662642.052:4249154): pid=17189 uid=0 auid=1055 ses=258102 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662701.066:4249155): pid=17379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662701.066:4249156): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662701.066:4249157): pid=17378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662701.067:4249158): pid=17380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662701.067:4249159): pid=17379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662701.067:4249160): pid=17378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662701.068:4249161): pid=17378 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258103 res=1
type=LOGIN msg=audit(1674662701.068:4249162): pid=17380 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258104 res=1
type=LOGIN msg=audit(1674662701.068:4249163): pid=17379 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258105 res=1
type=USER_START msg=audit(1674662701.113:4249164): pid=17379 uid=0 auid=0 ses=258105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662701.113:4249165): pid=17380 uid=0 auid=1055 ses=258104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662701.113:4249166): pid=17378 uid=0 auid=0 ses=258103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662701.115:4249167): pid=17380 uid=0 auid=1055 ses=258104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662701.116:4249168): pid=17379 uid=0 auid=0 ses=258105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662701.116:4249169): pid=17378 uid=0 auid=0 ses=258103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662701.214:4249170): pid=17379 uid=0 auid=0 ses=258105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662701.217:4249171): pid=17379 uid=0 auid=0 ses=258105 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662701.390:4249172): pid=17380 uid=0 auid=1055 ses=258104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662701.392:4249173): pid=17380 uid=0 auid=1055 ses=258104 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674662704.406:4249174): avc: denied { name_connect } for pid=16971 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674662704.406:4249174): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc22866a20 a2=10 a3=7ffc22866a1c items=0 ppid=5547 pid=16971 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662704.406:4249174): proctitle="dovecot/auth"
type=AVC msg=audit(1674662704.419:4249175): avc: denied { write } for pid=17000 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674662704.419:4249175): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb3126100 a2=6e a3=63d15330 items=0 ppid=5547 pid=17000 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662704.419:4249175): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674662704.442:4249176): pid=17378 uid=0 auid=0 ses=258103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662704.444:4249177): pid=17378 uid=0 auid=0 ses=258103 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674662742.045:4249178): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674662742.045:4249178): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b9e2117f010 items=0 ppid=17547 pid=17555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662742.045:4249178): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650038312E37302E3230332E3839002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543136
type=USER_ACCT msg=audit(1674662761.461:4249179): pid=17619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662761.461:4249180): pid=17619 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662761.461:4249181): pid=17619 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258106 res=1
type=USER_START msg=audit(1674662761.475:4249182): pid=17619 uid=0 auid=1055 ses=258106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662761.477:4249183): pid=17619 uid=0 auid=1055 ses=258106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662761.753:4249184): pid=17619 uid=0 auid=1055 ses=258106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662761.755:4249185): pid=17619 uid=0 auid=1055 ses=258106 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662821.772:4249186): pid=17807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662821.772:4249187): pid=17807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662821.772:4249188): pid=17807 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258107 res=1
type=USER_START msg=audit(1674662821.795:4249189): pid=17807 uid=0 auid=1055 ses=258107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662821.807:4249190): pid=17807 uid=0 auid=1055 ses=258107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662822.255:4249191): pid=17807 uid=0 auid=1055 ses=258107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662822.258:4249192): pid=17807 uid=0 auid=1055 ses=258107 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674662848.539:4249193): pid=17908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674662848.539:4249194): pid=17908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674662848.539:4249195): pid=17908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17908 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674662849.051:4249196): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=17908 suid=74 rport=47508 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674662849.051:4249197): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=17908 suid=74 rport=47508 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674662849.872:4249198): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674662851.987:4249199): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674662852.258:4249200): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17908 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674662852.259:4249201): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17908 suid=74 rport=47508 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674662852.260:4249202): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674662852.260:4249203): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674662852.260:4249204): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17907 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674662852.260:4249205): pid=17907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674662881.273:4249206): pid=17993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662881.273:4249207): pid=17993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662881.273:4249208): pid=17993 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258108 res=1
type=USER_START msg=audit(1674662881.289:4249209): pid=17993 uid=0 auid=1055 ses=258108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662881.291:4249210): pid=17993 uid=0 auid=1055 ses=258108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662881.540:4249211): pid=17993 uid=0 auid=1055 ses=258108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662881.541:4249212): pid=17993 uid=0 auid=1055 ses=258108 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662941.555:4249213): pid=18179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674662941.555:4249214): pid=18178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662941.555:4249215): pid=18179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674662941.555:4249216): pid=18178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674662941.555:4249217): pid=18179 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258109 res=1
type=LOGIN msg=audit(1674662941.555:4249218): pid=18178 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258110 res=1
type=USER_START msg=audit(1674662941.584:4249219): pid=18179 uid=0 auid=1055 ses=258109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674662941.584:4249220): pid=18178 uid=0 auid=0 ses=258110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662941.585:4249221): pid=18179 uid=0 auid=1055 ses=258109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674662941.586:4249222): pid=18178 uid=0 auid=0 ses=258110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662941.940:4249223): pid=18179 uid=0 auid=1055 ses=258109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662941.944:4249224): pid=18179 uid=0 auid=1055 ses=258109 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674662942.862:4249225): pid=18178 uid=0 auid=0 ses=258110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674662942.865:4249226): pid=18178 uid=0 auid=0 ses=258110 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674662978.938:4249227): avc: denied { read } for pid=18331 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674662978.938:4249227): avc: denied { open } for pid=18331 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662978.938:4249227): arch=c000003e syscall=2 success=yes exit=18 a0=55c45781ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=18331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662978.938:4249227): proctitle="dovecot/auth"
type=AVC msg=audit(1674662978.938:4249228): avc: denied { getattr } for pid=18331 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674662978.938:4249228): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe8a65a350 a2=7ffe8a65a350 a3=fffffc00 items=0 ppid=5547 pid=18331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662978.938:4249228): proctitle="dovecot/auth"
type=AVC msg=audit(1674662979.448:4249229): avc: denied { name_connect } for pid=18331 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674662979.448:4249229): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe8a65a140 a2=10 a3=7ffe8a65a13c items=0 ppid=5547 pid=18331 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662979.448:4249229): proctitle="dovecot/auth"
type=AVC msg=audit(1674662979.476:4249230): avc: denied { write } for pid=18360 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674662979.476:4249230): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5a53f930 a2=6e a3=63d15443 items=0 ppid=5547 pid=18360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674662979.476:4249230): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674663001.911:4249231): pid=18499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663001.911:4249232): pid=18499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663001.913:4249233): pid=18499 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258111 res=1
type=USER_ACCT msg=audit(1674663001.913:4249234): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663001.913:4249235): pid=18497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663001.914:4249236): pid=18497 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258112 res=1
type=USER_ACCT msg=audit(1674663001.923:4249237): pid=18498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663001.924:4249238): pid=18498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663001.924:4249239): pid=18498 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258113 res=1
type=USER_START msg=audit(1674663001.963:4249240): pid=18497 uid=0 auid=0 ses=258112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663001.971:4249241): pid=18497 uid=0 auid=0 ses=258112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663002.020:4249242): pid=18499 uid=0 auid=1055 ses=258111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663002.020:4249243): pid=18498 uid=0 auid=0 ses=258113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663002.030:4249244): pid=18498 uid=0 auid=0 ses=258113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663002.030:4249245): pid=18499 uid=0 auid=1055 ses=258111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663002.038:4249246): pid=18497 uid=0 auid=0 ses=258112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663002.038:4249247): pid=18497 uid=0 auid=0 ses=258112 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663002.530:4249248): pid=18499 uid=0 auid=1055 ses=258111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663002.544:4249249): pid=18499 uid=0 auid=1055 ses=258111 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663005.516:4249250): pid=18498 uid=0 auid=0 ses=258113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663005.517:4249251): pid=18498 uid=0 auid=0 ses=258113 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663061.535:4249252): pid=18698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663061.535:4249253): pid=18698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663061.537:4249254): pid=18698 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258114 res=1
type=USER_START msg=audit(1674663061.556:4249255): pid=18698 uid=0 auid=1055 ses=258114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663061.558:4249256): pid=18698 uid=0 auid=1055 ses=258114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663061.810:4249257): pid=18698 uid=0 auid=1055 ses=258114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663061.812:4249258): pid=18698 uid=0 auid=1055 ses=258114 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663083.922:4249259): avc: denied { name_connect } for pid=18331 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674663083.922:4249259): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe8a65a140 a2=10 a3=7ffe8a65a13c items=0 ppid=5547 pid=18331 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663083.922:4249259): proctitle="dovecot/auth"
type=AVC msg=audit(1674663083.957:4249260): avc: denied { write } for pid=18777 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674663083.957:4249260): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdd1676880 a2=6e a3=63d154ab items=0 ppid=5547 pid=18777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663083.957:4249260): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674663121.826:4249261): pid=18901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663121.826:4249262): pid=18901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663121.827:4249263): pid=18901 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258115 res=1
type=USER_START msg=audit(1674663121.845:4249264): pid=18901 uid=0 auid=1055 ses=258115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663121.847:4249265): pid=18901 uid=0 auid=1055 ses=258115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663122.105:4249266): pid=18901 uid=0 auid=1055 ses=258115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663122.107:4249267): pid=18901 uid=0 auid=1055 ses=258115 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663140.831:4249268): avc: denied { write } for pid=18777 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674663140.831:4249268): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdd1676880 a2=6e a3=63d154e4 items=0 ppid=5547 pid=18777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663140.831:4249268): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674663181.121:4249269): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663181.121:4249270): pid=19093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663181.121:4249271): pid=19094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663181.121:4249272): pid=19093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663181.121:4249273): pid=19093 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258116 res=1
type=LOGIN msg=audit(1674663181.121:4249274): pid=19094 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258117 res=1
type=USER_START msg=audit(1674663181.147:4249275): pid=19093 uid=0 auid=0 ses=258116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663181.147:4249276): pid=19094 uid=0 auid=1055 ses=258117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663181.148:4249277): pid=19094 uid=0 auid=1055 ses=258117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663181.148:4249278): pid=19093 uid=0 auid=0 ses=258116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663181.205:4249279): pid=19093 uid=0 auid=0 ses=258116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663181.206:4249280): pid=19093 uid=0 auid=0 ses=258116 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663181.425:4249281): pid=19094 uid=0 auid=1055 ses=258117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663181.427:4249282): pid=19094 uid=0 auid=1055 ses=258117 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663192.032:4249283): avc: denied { name_connect } for pid=18331 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674663192.032:4249283): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe8a65a140 a2=10 a3=7ffe8a65a13c items=0 ppid=5547 pid=18331 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663192.032:4249283): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674663241.440:4249284): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663241.440:4249285): pid=19303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663241.441:4249286): pid=19303 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258118 res=1
type=USER_START msg=audit(1674663241.452:4249287): pid=19303 uid=0 auid=1055 ses=258118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663241.454:4249288): pid=19303 uid=0 auid=1055 ses=258118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663241.678:4249289): pid=19303 uid=0 auid=1055 ses=258118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663241.680:4249290): pid=19303 uid=0 auid=1055 ses=258118 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663301.692:4249291): pid=19496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663301.692:4249292): pid=19495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663301.692:4249293): pid=19496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663301.692:4249294): pid=19495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663301.692:4249295): pid=19497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663301.692:4249296): pid=19496 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258119 res=1
type=LOGIN msg=audit(1674663301.692:4249297): pid=19495 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258120 res=1
type=CRED_ACQ msg=audit(1674663301.692:4249298): pid=19497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663301.693:4249299): pid=19497 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258121 res=1
type=USER_START msg=audit(1674663301.728:4249300): pid=19495 uid=0 auid=0 ses=258120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663301.728:4249301): pid=19496 uid=0 auid=0 ses=258119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663301.728:4249302): pid=19497 uid=0 auid=1055 ses=258121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663301.729:4249303): pid=19497 uid=0 auid=1055 ses=258121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663301.730:4249304): pid=19495 uid=0 auid=0 ses=258120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663301.730:4249305): pid=19496 uid=0 auid=0 ses=258119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663301.830:4249306): pid=19495 uid=0 auid=0 ses=258120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663301.833:4249307): pid=19495 uid=0 auid=0 ses=258120 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663302.096:4249308): pid=19497 uid=0 auid=1055 ses=258121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663302.098:4249309): pid=19497 uid=0 auid=1055 ses=258121 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663305.037:4249310): pid=19496 uid=0 auid=0 ses=258119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663305.039:4249311): pid=19496 uid=0 auid=0 ses=258119 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663321.794:4249312): avc: denied { read } for pid=19591 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674663321.794:4249312): avc: denied { open } for pid=19591 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663321.794:4249312): arch=c000003e syscall=2 success=yes exit=18 a0=55d3abca4f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=19591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663321.794:4249312): proctitle="dovecot/auth"
type=AVC msg=audit(1674663321.794:4249313): avc: denied { getattr } for pid=19591 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663321.794:4249313): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcdb7d40a0 a2=7ffcdb7d40a0 a3=fffffc00 items=0 ppid=5547 pid=19591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663321.794:4249313): proctitle="dovecot/auth"
type=AVC msg=audit(1674663331.176:4249314): avc: denied { write } for pid=19620 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674663331.176:4249314): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe9c175f10 a2=6e a3=63d155a3 items=0 ppid=5547 pid=19620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663331.176:4249314): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674663361.063:4249315): pid=19802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663361.063:4249316): pid=19802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663361.064:4249317): pid=19802 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258122 res=1
type=USER_START msg=audit(1674663361.082:4249318): pid=19802 uid=0 auid=1055 ses=258122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663361.084:4249319): pid=19802 uid=0 auid=1055 ses=258122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663361.316:4249320): pid=19802 uid=0 auid=1055 ses=258122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663361.318:4249321): pid=19802 uid=0 auid=1055 ses=258122 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674663418.113:4249322): pid=20019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663418.114:4249323): pid=20019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663418.114:4249324): pid=20019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20019 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674663418.300:4249325): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=20019 suid=74 rport=57308 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674663418.300:4249326): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=20019 suid=74 rport=57308 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674663419.344:4249327): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674663421.335:4249328): pid=20027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663421.336:4249329): pid=20027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663421.338:4249330): pid=20027 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258123 res=1
type=USER_START msg=audit(1674663421.355:4249331): pid=20027 uid=0 auid=1055 ses=258123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663421.356:4249332): pid=20027 uid=0 auid=1055 ses=258123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674663421.380:4249333): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674663421.588:4249334): pid=20027 uid=0 auid=1055 ses=258123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663421.589:4249335): pid=20027 uid=0 auid=1055 ses=258123 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674663424.571:4249336): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674663426.625:4249337): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674663429.816:4249338): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674663431.890:4249339): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674663435.081:4249340): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20019 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663435.081:4249341): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20019 suid=74 rport=57308 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663435.084:4249342): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663435.084:4249343): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663435.084:4249344): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20018 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674663435.084:4249345): pid=20018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674663481.626:4249346): pid=20236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663481.626:4249347): pid=20236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663481.627:4249348): pid=20236 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258124 res=1
type=USER_START msg=audit(1674663481.660:4249349): pid=20236 uid=0 auid=1055 ses=258124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663481.678:4249350): pid=20236 uid=0 auid=1055 ses=258124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663482.083:4249351): pid=20236 uid=0 auid=1055 ses=258124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663482.085:4249352): pid=20236 uid=0 auid=1055 ses=258124 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663541.099:4249353): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663541.099:4249354): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663541.100:4249355): pid=20428 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258125 res=1
type=USER_START msg=audit(1674663541.113:4249356): pid=20428 uid=0 auid=1055 ses=258125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663541.114:4249357): pid=20428 uid=0 auid=1055 ses=258125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663541.473:4249358): pid=20428 uid=0 auid=1055 ses=258125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663541.475:4249359): pid=20428 uid=0 auid=1055 ses=258125 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663600.581:4249360): avc: denied { read } for pid=20633 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674663600.581:4249360): avc: denied { open } for pid=20633 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663600.581:4249360): arch=c000003e syscall=2 success=yes exit=18 a0=564eef13ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663600.581:4249360): proctitle="dovecot/auth"
type=AVC msg=audit(1674663600.581:4249361): avc: denied { getattr } for pid=20633 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663600.581:4249361): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffee6e2c730 a2=7ffee6e2c730 a3=fffffc00 items=0 ppid=5547 pid=20633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663600.581:4249361): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674663601.490:4249362): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663601.490:4249363): pid=20639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663601.490:4249364): pid=20638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663601.490:4249365): pid=20640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663601.490:4249366): pid=20637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663601.490:4249367): pid=20639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663601.490:4249368): pid=20640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663601.490:4249369): pid=20638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663601.490:4249370): pid=20637 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258126 res=1
type=LOGIN msg=audit(1674663601.490:4249371): pid=20639 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258127 res=1
type=LOGIN msg=audit(1674663601.490:4249372): pid=20640 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258128 res=1
type=LOGIN msg=audit(1674663601.490:4249373): pid=20638 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258129 res=1
type=USER_START msg=audit(1674663601.566:4249374): pid=20639 uid=0 auid=0 ses=258127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663601.567:4249375): pid=20638 uid=0 auid=0 ses=258129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663601.568:4249376): pid=20640 uid=0 auid=1055 ses=258128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663601.569:4249377): pid=20638 uid=0 auid=0 ses=258129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663601.569:4249378): pid=20640 uid=0 auid=1055 ses=258128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663601.569:4249379): pid=20639 uid=0 auid=0 ses=258127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663601.570:4249380): pid=20637 uid=0 auid=0 ses=258126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663601.570:4249381): pid=20637 uid=0 auid=0 ses=258126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663601.603:4249382): pid=20637 uid=0 auid=0 ses=258126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663601.608:4249383): pid=20637 uid=0 auid=0 ses=258126 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663601.658:4249384): pid=20639 uid=0 auid=0 ses=258127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663601.662:4249385): pid=20639 uid=0 auid=0 ses=258127 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663601.932:4249386): pid=20640 uid=0 auid=1055 ses=258128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663601.936:4249387): pid=20640 uid=0 auid=1055 ses=258128 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663602.777:4249388): avc: denied { name_connect } for pid=20633 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674663602.777:4249388): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffee6e2c520 a2=10 a3=7ffee6e2c51c items=0 ppid=5547 pid=20633 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663602.777:4249388): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674663603.888:4249389): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674663603.888:4249389): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b11cece4010 items=0 ppid=20674 pid=20679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663603.888:4249389): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130362E37352E31372E3832002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543136
type=NETFILTER_CFG msg=audit(1674663604.148:4249390): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674663604.148:4249390): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b495bf41010 items=0 ppid=1588 pid=20683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.148:4249390): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E31332E3134382E372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A32323A3437002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.152:4249391): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674663604.152:4249391): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b32dfccf010 items=0 ppid=1588 pid=20684 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.152:4249391): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131382E3231322E38332E39392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A32393A3132002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.157:4249392): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674663604.157:4249392): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b8ddba5f010 items=0 ppid=1588 pid=20685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.157:4249392): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132322E3232342E332E3135342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A33333A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.162:4249393): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674663604.162:4249393): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ba86ea27010 items=0 ppid=1588 pid=20686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.162:4249393): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E36352E3232302E34382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A33383A3135002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.167:4249394): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674663604.167:4249394): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4370ec2010 items=0 ppid=1588 pid=20687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.167:4249394): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E36382E3135352E3134342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A33383A3335002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.172:4249395): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674663604.172:4249395): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad0525ec010 items=0 ppid=1588 pid=20688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.172:4249395): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138332E3132392E3230382E38322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A34373A3137002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.177:4249396): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674663604.177:4249396): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2afcdcf56010 items=0 ppid=1588 pid=20689 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.177:4249396): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E33352E3231342E322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431353A35393A3537002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.182:4249397): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674663604.182:4249397): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aed2d31a010 items=0 ppid=1588 pid=20690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.182:4249397): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138332E362E34332E3233362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A30323A3338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.188:4249398): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674663604.188:4249398): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad8364a1010 items=0 ppid=1588 pid=20691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.188:4249398): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130362E31332E33362E3231332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A30343A3535002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.193:4249399): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674663604.193:4249399): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac778524010 items=0 ppid=1588 pid=20692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.193:4249399): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138322E3235332E33332E3139342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A31363A3134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674663604.198:4249400): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674663604.198:4249400): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b2715ca6010 items=0 ppid=1588 pid=20693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663604.198:4249400): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131312E37342E382E3137372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A31363A3234002D6A0044524F50
type=CRED_DISP msg=audit(1674663604.929:4249401): pid=20638 uid=0 auid=0 ses=258129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663604.931:4249402): pid=20638 uid=0 auid=0 ses=258129 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663609.094:4249403): avc: denied { write } for pid=20710 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674663609.094:4249403): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffce44522e0 a2=6e a3=63d156b9 items=0 ppid=5547 pid=20710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663609.094:4249403): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674663613.447:4249404): avc: denied { read append } for pid=20718 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674663613.447:4249404): avc: denied { open } for pid=20718 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663613.447:4249404): arch=c000003e syscall=2 success=yes exit=8 a0=564054fe2a60 a1=402 a2=7ffddfde5610 a3=7ffddfde50a0 items=0 ppid=5547 pid=20718 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663613.447:4249404): proctitle="dovecot/imap"
type=AVC msg=audit(1674663613.447:4249405): avc: denied { getattr } for pid=20718 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663613.447:4249405): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffddfde5570 a2=7ffddfde5570 a3=7ffddfde4fe0 items=0 ppid=5547 pid=20718 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663613.447:4249405): proctitle="dovecot/imap"
type=AVC msg=audit(1674663613.447:4249406): avc: denied { write } for pid=20718 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663613.447:4249406): arch=c000003e syscall=2 success=yes exit=10 a0=564054fe7990 a1=2 a2=7ffddfde5310 a3=7ffddfde4da0 items=0 ppid=5547 pid=20718 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663613.447:4249406): proctitle="dovecot/imap"
type=AVC msg=audit(1674663613.447:4249407): avc: denied { lock } for pid=20718 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663613.447:4249407): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffddfde5210 a3=63d156bd items=0 ppid=5547 pid=20718 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663613.447:4249407): proctitle="dovecot/imap"
type=AVC msg=audit(1674663613.447:4249408): avc: denied { read } for pid=20718 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674663613.447:4249408): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=564055010300 a2=90800 a3=0 items=0 ppid=5547 pid=20718 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663613.447:4249408): proctitle="dovecot/imap"
type=AVC msg=audit(1674663613.448:4249409): avc: denied { getattr } for pid=20718 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663613.448:4249409): arch=c000003e syscall=4 success=yes exit=0 a0=564054fd2a60 a1=7ffddfde55c0 a2=7ffddfde55c0 a3=6f632e6f72676173 items=0 ppid=5547 pid=20718 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663613.448:4249409): proctitle="dovecot/imap"
type=AVC msg=audit(1674663617.277:4249410): avc: denied { write } for pid=20741 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674663617.277:4249410): arch=c000003e syscall=21 success=yes exit=0 a0=561c771084c0 a1=2 a2=7b48 a3=7ffea45794e0 items=0 ppid=5547 pid=20741 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663617.277:4249410): proctitle="dovecot/imap"
type=AVC msg=audit(1674663623.326:4249411): avc: denied { write } for pid=20710 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674663623.326:4249411): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffce44522e0 a2=6e a3=63d156c7 items=0 ppid=5547 pid=20710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663623.326:4249411): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674663632.748:4249412): avc: denied { read write } for pid=20799 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674663632.748:4249412): avc: denied { open } for pid=20799 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.748:4249412): arch=c000003e syscall=2 success=yes exit=19 a0=561657cca4d0 a1=2 a2=7ffe5f055190 a3=7ffe5f054e20 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.748:4249412): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674663632.748:4249413): avc: denied { getattr } for pid=20799 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.748:4249413): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffe5f0552f0 a2=7ffe5f0552f0 a3=7ffe5f054ce0 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.748:4249413): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674663632.752:4249414): avc: denied { add_name } for pid=20799 comm="lmtp" name="1674663632.M747809P20799.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674663632.752:4249414): avc: denied { create } for pid=20799 comm="lmtp" name="1674663632.M747809P20799.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.752:4249414): arch=c000003e syscall=2 success=yes exit=21 a0=561657c44218 a1=2c1 a2=1ff a3=7ffe5f054da0 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.752:4249414): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674663632.756:4249415): avc: denied { remove_name } for pid=20799 comm="lmtp" name="1674663632.M747809P20799.host.nexidigital.com" dev="vda1" ino=62201775 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674663632.756:4249415): avc: denied { rename } for pid=20799 comm="lmtp" name="1674663632.M747809P20799.host.nexidigital.com" dev="vda1" ino=62201775 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.756:4249415): arch=c000003e syscall=82 success=yes exit=0 a0=561657c435b8 a1=561657c43608 a2=69d0 a3=7ffe5f054d20 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.756:4249415): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674663632.759:4249416): avc: denied { lock } for pid=20799 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.cache" dev="vda1" ino=320202326 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.759:4249416): arch=c000003e syscall=72 success=yes exit=0 a0=16 a1=7 a2=7ffe5f0550c0 a3=63d156d0 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.759:4249416): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674663632.759:4249417): avc: denied { unlink } for pid=20799 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=320614319 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.759:4249417): arch=c000003e syscall=87 success=yes exit=0 a0=561657d17f70 a1=7f7c71832071 a2=2f9 a3=4 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.759:4249417): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674663632.759:4249418): avc: denied { append } for pid=20799 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=320200839 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.759:4249418): arch=c000003e syscall=2 success=yes exit=21 a0=561657d00a30 a1=402 a2=7ffe5f055220 a3=4 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.759:4249418): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674663632.760:4249419): avc: denied { link } for pid=20799 comm="lmtp" name=".temp.host.nexidigital.com.20799.18fed2e63986f4e1" dev="vda1" ino=320614319 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.760:4249419): arch=c000003e syscall=86 success=yes exit=0 a0=561657c448f0 a1=561657c44860 a2=1 a3=ffffff00 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.760:4249419): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674663632.760:4249420): avc: denied { setattr } for pid=20799 comm="lmtp" name=".temp.host.nexidigital.com.20799.18fed2e63986f4e1" dev="vda1" ino=320614319 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663632.760:4249420): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=426 a3=36 items=0 ppid=5547 pid=20799 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663632.760:4249420): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674663661.952:4249421): pid=20999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663661.953:4249422): pid=20999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663661.954:4249423): pid=20999 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258130 res=1
type=USER_START msg=audit(1674663661.980:4249424): pid=20999 uid=0 auid=1055 ses=258130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663661.981:4249425): pid=20999 uid=0 auid=1055 ses=258130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663662.356:4249426): pid=20999 uid=0 auid=1055 ses=258130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663662.357:4249427): pid=20999 uid=0 auid=1055 ses=258130 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663665.317:4249428): pid=21026 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.318:4249429): pid=21026 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.318:4249430): pid=21026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.338:4249431): pid=21026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.341:4249432): pid=21026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.341:4249433): pid=21026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.363:4249434): pid=21030 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.364:4249435): pid=21030 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.364:4249436): pid=21030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.379:4249437): pid=21030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.382:4249438): pid=21030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.382:4249439): pid=21030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.405:4249440): pid=21037 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.405:4249441): pid=21037 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.405:4249442): pid=21037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.420:4249443): pid=21037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.424:4249444): pid=21037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.424:4249445): pid=21037 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.566:4249446): pid=21042 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.566:4249447): pid=21042 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.566:4249448): pid=21042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.583:4249449): pid=21042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.585:4249450): pid=21042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.586:4249451): pid=21042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.606:4249452): pid=21048 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.606:4249453): pid=21048 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.606:4249454): pid=21048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.620:4249455): pid=21048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.622:4249456): pid=21048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.622:4249457): pid=21048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.644:4249458): pid=21052 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.644:4249459): pid=21052 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.644:4249460): pid=21052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.657:4249461): pid=21052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.662:4249462): pid=21052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.662:4249463): pid=21052 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.699:4249464): pid=21058 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.699:4249465): pid=21058 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.699:4249466): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.714:4249467): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.717:4249468): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.717:4249469): pid=21058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.738:4249470): pid=21063 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.738:4249471): pid=21063 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.739:4249472): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.751:4249473): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.754:4249474): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.754:4249475): pid=21063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.776:4249476): pid=21067 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.776:4249477): pid=21067 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.776:4249478): pid=21067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.789:4249479): pid=21067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.792:4249480): pid=21067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.792:4249481): pid=21067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.814:4249482): pid=21073 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.814:4249483): pid=21073 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.814:4249484): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.828:4249485): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.831:4249486): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.831:4249487): pid=21073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663665.856:4249488): pid=21078 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663665.856:4249489): pid=21078 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663665.856:4249490): pid=21078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663665.874:4249491): pid=21078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663665.877:4249492): pid=21078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663665.877:4249493): pid=21078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663668.717:4249494): pid=21091 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663668.717:4249495): pid=21091 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663668.718:4249496): pid=21091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663668.733:4249497): pid=21091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663668.789:4249498): pid=21091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663668.789:4249499): pid=21091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663668.829:4249500): pid=21099 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663668.829:4249501): pid=21099 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663668.830:4249502): pid=21099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663668.850:4249503): pid=21099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663668.937:4249504): pid=21099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663668.937:4249505): pid=21099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663668.963:4249506): pid=21104 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663668.963:4249507): pid=21104 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674663668.964:4249508): pid=21104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663668.979:4249509): pid=21104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663669.103:4249510): pid=21104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663669.103:4249511): pid=21104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663669.146:4249512): pid=21110 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663669.147:4249513): pid=21110 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674663669.147:4249514): pid=21110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663669.167:4249515): pid=21110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663669.171:4249516): pid=21110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663669.171:4249517): pid=21110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663669.198:4249518): pid=21115 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663669.199:4249519): pid=21115 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D32744D6F5A39626B71743853414475542E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674663669.199:4249520): pid=21115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663669.215:4249521): pid=21115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663669.218:4249522): pid=21115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663669.218:4249523): pid=21115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663669.242:4249524): pid=21120 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663669.242:4249525): pid=21120 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D32744D6F5A39626B71743853414475542E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674663669.243:4249526): pid=21120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663669.260:4249527): pid=21120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663669.268:4249528): pid=21120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663669.268:4249529): pid=21120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663669.298:4249530): pid=21126 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663669.298:4249531): pid=21126 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D32744D6F5A39626B71743853414475542E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674663669.299:4249532): pid=21126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663669.313:4249533): pid=21126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663669.318:4249534): pid=21126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663669.318:4249535): pid=21126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663669.344:4249536): pid=21131 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663669.345:4249537): pid=21131 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674663669.345:4249538): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663669.361:4249539): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663669.367:4249540): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663669.367:4249541): pid=21131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663669.890:4249542): pid=21138 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663669.891:4249543): pid=21138 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674663669.891:4249544): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663669.915:4249545): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663669.919:4249546): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663669.919:4249547): pid=21138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663670.322:4249548): pid=21144 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663670.322:4249549): pid=21144 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674663670.323:4249550): pid=21144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663670.341:4249551): pid=21144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663670.344:4249552): pid=21144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663670.344:4249553): pid=21144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663670.366:4249554): pid=21149 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663670.366:4249555): pid=21149 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674663670.366:4249556): pid=21149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663670.379:4249557): pid=21149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663670.382:4249558): pid=21149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663670.382:4249559): pid=21149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663670.402:4249560): pid=21152 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663670.403:4249561): pid=21152 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674663670.403:4249562): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663670.417:4249563): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663670.420:4249564): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663670.420:4249565): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663670.451:4249566): pid=21158 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663670.451:4249567): pid=21158 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663670.452:4249568): pid=21158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663670.470:4249569): pid=21158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663670.596:4249570): pid=21158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663670.596:4249571): pid=21158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663671.367:4249572): pid=21165 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663671.367:4249573): pid=21165 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663671.367:4249574): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663671.387:4249575): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663671.449:4249576): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663671.449:4249577): pid=21165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663671.477:4249578): pid=21171 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663671.478:4249579): pid=21171 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674663671.478:4249580): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663671.492:4249581): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663672.683:4249582): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663672.683:4249583): pid=21171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663672.918:4249584): pid=21181 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663672.919:4249585): pid=21181 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674663672.919:4249586): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663672.940:4249587): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663674.304:4249588): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663674.304:4249589): pid=21181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663674.511:4249590): pid=21193 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663674.511:4249591): pid=21193 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663674.511:4249592): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663674.525:4249593): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663676.398:4249594): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663676.398:4249595): pid=21193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663676.658:4249596): pid=21204 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663676.658:4249597): pid=21204 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674663676.658:4249598): pid=21204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663676.671:4249599): pid=21204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663677.815:4249600): pid=21204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663677.816:4249601): pid=21204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663677.908:4249602): pid=21216 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663677.908:4249603): pid=21216 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674663677.909:4249604): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663677.928:4249605): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663678.306:4249606): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663678.306:4249607): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663678.432:4249608): pid=21225 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663678.432:4249609): pid=21225 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674663678.433:4249610): pid=21225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663678.446:4249611): pid=21225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663680.646:4249612): pid=21225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663680.646:4249613): pid=21225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663680.909:4249614): pid=21242 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663680.909:4249615): pid=21242 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674663680.909:4249616): pid=21242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663680.932:4249617): pid=21242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663682.121:4249618): pid=21242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663682.121:4249619): pid=21242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663682.326:4249620): pid=21253 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663682.327:4249621): pid=21253 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F736974652026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F73697465202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663682.327:4249622): pid=21253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663682.342:4249623): pid=21253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663683.462:4249624): pid=21253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663683.462:4249625): pid=21253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663684.255:4249626): pid=21267 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674663684.255:4249627): pid=21267 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674663684.255:4249628): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674663684.270:4249629): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674663685.343:4249630): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674663685.343:4249631): pid=21267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674663721.376:4249632): pid=21388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663721.376:4249633): pid=21388 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663721.377:4249634): pid=21388 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258131 res=1
type=USER_START msg=audit(1674663721.391:4249635): pid=21388 uid=0 auid=1055 ses=258131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663721.393:4249636): pid=21388 uid=0 auid=1055 ses=258131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663721.675:4249637): pid=21388 uid=0 auid=1055 ses=258131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663721.679:4249638): pid=21388 uid=0 auid=1055 ses=258131 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663781.694:4249639): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663781.694:4249640): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663781.694:4249641): pid=21581 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258132 res=1
type=USER_START msg=audit(1674663781.710:4249642): pid=21581 uid=0 auid=1055 ses=258132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663781.712:4249643): pid=21581 uid=0 auid=1055 ses=258132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663782.002:4249644): pid=21581 uid=0 auid=1055 ses=258132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663782.004:4249645): pid=21581 uid=0 auid=1055 ses=258132 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663823.446:4249646): avc: denied { read } for pid=21713 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674663823.446:4249646): avc: denied { open } for pid=21713 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663823.446:4249646): arch=c000003e syscall=2 success=yes exit=18 a0=564a96588f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=21713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663823.446:4249646): proctitle="dovecot/auth"
type=AVC msg=audit(1674663823.447:4249647): avc: denied { getattr } for pid=21713 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663823.447:4249647): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcab994a80 a2=7ffcab994a80 a3=fffffc00 items=0 ppid=5547 pid=21713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663823.447:4249647): proctitle="dovecot/auth"
type=AVC msg=audit(1674663824.225:4249648): avc: denied { name_connect } for pid=21713 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674663824.225:4249648): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcab994870 a2=10 a3=7ffcab99486c items=0 ppid=5547 pid=21713 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663824.225:4249648): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674663825.322:4249649): table=filter family=2 entries=1034
type=SYSCALL msg=audit(1674663825.322:4249649): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aefca2ee010 items=0 ppid=21722 pid=21727 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663825.322:4249649): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131392E39362E3137352E39002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543136
type=USER_ACCT msg=audit(1674663841.016:4249650): pid=21772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663841.017:4249651): pid=21772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663841.018:4249652): pid=21772 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258133 res=1
type=USER_START msg=audit(1674663841.028:4249653): pid=21772 uid=0 auid=1055 ses=258133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663841.029:4249654): pid=21772 uid=0 auid=1055 ses=258133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663841.267:4249655): pid=21772 uid=0 auid=1055 ses=258133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663841.268:4249656): pid=21772 uid=0 auid=1055 ses=258133 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674663864.084:4249657): pid=21838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663864.084:4249658): pid=21838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663864.084:4249659): pid=21838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674663864.307:4249660): pid=21836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=21838 suid=74 rport=51837 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=122.117.95.68 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674663864.307:4249661): pid=21836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=21838 suid=74 rport=51837 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=122.117.95.68 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663864.575:4249662): pid=21836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21838 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663864.576:4249663): pid=21836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663864.576:4249664): pid=21836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663864.576:4249665): pid=21836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674663864.576:4249666): pid=21836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=122.117.95.68 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674663901.284:4249668): pid=21959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663901.284:4249667): pid=21958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674663901.284:4249669): pid=21957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663901.284:4249670): pid=21958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663901.284:4249671): pid=21957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663901.284:4249672): pid=21959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663901.284:4249673): pid=21959 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258134 res=1
type=LOGIN msg=audit(1674663901.284:4249674): pid=21957 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258136 res=1
type=LOGIN msg=audit(1674663901.284:4249675): pid=21958 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258135 res=1
type=USER_START msg=audit(1674663901.324:4249676): pid=21957 uid=0 auid=0 ses=258136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663901.324:4249677): pid=21958 uid=0 auid=0 ses=258135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674663901.324:4249678): pid=21959 uid=0 auid=1055 ses=258134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663901.325:4249679): pid=21959 uid=0 auid=1055 ses=258134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663901.325:4249680): pid=21958 uid=0 auid=0 ses=258135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663901.326:4249681): pid=21957 uid=0 auid=0 ses=258136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663901.508:4249682): pid=21957 uid=0 auid=0 ses=258136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663901.510:4249683): pid=21957 uid=0 auid=0 ses=258136 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663901.678:4249684): pid=21959 uid=0 auid=1055 ses=258134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663901.681:4249685): pid=21959 uid=0 auid=1055 ses=258134 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663904.654:4249686): pid=21958 uid=0 auid=0 ses=258135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663904.657:4249687): pid=21958 uid=0 auid=0 ses=258135 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674663909.906:4249688): avc: denied { read } for pid=22004 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674663909.906:4249688): avc: denied { open } for pid=22004 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663909.906:4249688): arch=c000003e syscall=2 success=yes exit=18 a0=556261956f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663909.906:4249688): proctitle="dovecot/auth"
type=AVC msg=audit(1674663909.906:4249689): avc: denied { getattr } for pid=22004 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674663909.906:4249689): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcbb92bfd0 a2=7ffcbb92bfd0 a3=fffffc00 items=0 ppid=5547 pid=22004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663909.906:4249689): proctitle="dovecot/auth"
type=AVC msg=audit(1674663911.724:4249690): avc: denied { name_connect } for pid=22004 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674663911.724:4249690): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcbb92bdc0 a2=10 a3=7ffcbb92bdbc items=0 ppid=5547 pid=22004 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663911.724:4249690): proctitle="dovecot/auth"
type=AVC msg=audit(1674663911.756:4249691): avc: denied { write } for pid=22012 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674663911.756:4249691): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe08bac9a0 a2=6e a3=63d157e7 items=0 ppid=5547 pid=22012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674663911.756:4249691): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674663922.402:4249692): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663922.402:4249693): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663922.402:4249694): pid=22047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22047 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674663922.630:4249695): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=22047 suid=74 rport=60262 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=99.108.98.253 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674663922.630:4249696): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=22047 suid=74 rport=60262 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=99.108.98.253 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663922.903:4249697): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22047 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663922.903:4249698): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663922.904:4249699): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674663922.904:4249700): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22046 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674663922.904:4249701): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=99.108.98.253 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674663961.681:4249702): pid=22278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674663961.681:4249703): pid=22278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674663961.682:4249704): pid=22278 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258137 res=1
type=USER_START msg=audit(1674663961.703:4249705): pid=22278 uid=0 auid=1055 ses=258137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674663961.711:4249706): pid=22278 uid=0 auid=1055 ses=258137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674663961.997:4249707): pid=22278 uid=0 auid=1055 ses=258137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674663962.000:4249708): pid=22278 uid=0 auid=1055 ses=258137 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674664011.650:4249709): pid=22440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664011.650:4249710): pid=22440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664011.650:4249711): pid=22440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674664011.944:4249712): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=22440 suid=74 rport=51936 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674664011.944:4249713): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=22440 suid=74 rport=51936 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=USER_AUTH msg=audit(1674664015.282:4249714): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674664017.136:4249715): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674664017.651:4249716): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22440 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664017.652:4249717): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22440 suid=74 rport=51936 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664017.653:4249718): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664017.653:4249719): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664017.653:4249720): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22437 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674664017.653:4249721): pid=22437 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674664021.016:4249722): pid=22464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664021.016:4249723): pid=22464 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664021.017:4249724): pid=22464 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258138 res=1
type=USER_START msg=audit(1674664021.035:4249725): pid=22464 uid=0 auid=1055 ses=258138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664021.037:4249726): pid=22464 uid=0 auid=1055 ses=258138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664021.311:4249727): pid=22464 uid=0 auid=1055 ses=258138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664021.313:4249728): pid=22464 uid=0 auid=1055 ses=258138 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664032.737:4249729): avc: denied { write } for pid=22520 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664032.737:4249729): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffafbb09a0 a2=6e a3=63d15860 items=0 ppid=5547 pid=22520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664032.737:4249729): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674664032.752:4249730): avc: denied { read append } for pid=22519 comm="lmtp" name="maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664032.752:4249730): avc: denied { open } for pid=22519 comm="lmtp" path="/home/wwwtestugo/mail/maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664032.752:4249730): arch=c000003e syscall=2 success=yes exit=17 a0=55a9b7dd4a00 a1=402 a2=7ffe07b574c0 a3=fffff800 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664032.752:4249730): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664032.755:4249731): avc: denied { getattr } for pid=22519 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664032.755:4249731): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffe07b58340 a2=7ffe07b58340 a3=7ffe07b57da0 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664032.755:4249731): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664032.756:4249732): avc: denied { write } for pid=22519 comm="lmtp" name="dovecot.index" dev="vda1" ino=47725134 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664032.756:4249732): arch=c000003e syscall=2 success=yes exit=18 a0=55a9b7e12bb0 a1=2 a2=7ffe07b580e0 a3=7ffe07b57ba0 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664032.756:4249732): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664033.241:4249733): avc: denied { read write } for pid=22519 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664033.241:4249733): avc: denied { open } for pid=22519 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664033.241:4249733): arch=c000003e syscall=2 success=yes exit=19 a0=55a9b7e08290 a1=2 a2=7ffe07b58360 a3=7ffe07b58020 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664033.241:4249733): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664033.241:4249734): avc: denied { getattr } for pid=22519 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664033.241:4249734): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffe07b584c0 a2=7ffe07b584c0 a3=7ffe07b57ea0 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664033.241:4249734): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664035.782:4249735): avc: denied { write } for pid=22519 comm="lmtp" name="tmp" dev="vda1" ino=134000050 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674664035.782:4249735): avc: denied { add_name } for pid=22519 comm="lmtp" name="1674664032.M754646P22519.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674664035.782:4249735): avc: denied { create } for pid=22519 comm="lmtp" name="1674664032.M754646P22519.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664035.782:4249735): arch=c000003e syscall=2 success=yes exit=21 a0=55a9b7d69ca0 a1=2c1 a2=1ff a3=7ffe07b57f60 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664035.782:4249735): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664035.859:4249736): avc: denied { lock } for pid=22519 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664035.859:4249736): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffe07b57f70 a3=63d15863 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664035.859:4249736): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664036.175:4249737): avc: denied { remove_name } for pid=22519 comm="lmtp" name="1674664032.M754646P22519.host.nexidigital.com" dev="vda1" ino=130847615 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674664036.175:4249737): avc: denied { rename } for pid=22519 comm="lmtp" name="1674664032.M754646P22519.host.nexidigital.com" dev="vda1" ino=130847615 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664036.175:4249737): arch=c000003e syscall=82 success=yes exit=0 a0=55a9b7d695a0 a1=55a9b7d695e8 a2=69f8 a3=7ffe07b57f20 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664036.175:4249737): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664036.184:4249738): avc: denied { read } for pid=22519 comm="lmtp" name="new" dev="vda1" ino=126223302 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674664036.184:4249738): arch=c000003e syscall=2 success=yes exit=21 a0=55a9b7e17490 a1=0 a2=0 a3=7ffe07b57f20 items=0 ppid=5547 pid=22519 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664036.184:4249738): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664040.586:4249739): avc: denied { name_connect } for pid=22004 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664040.586:4249739): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcbb92bdc0 a2=10 a3=7ffcbb92bdbc items=0 ppid=5547 pid=22004 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664040.586:4249739): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674664081.334:4249740): pid=22680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664081.334:4249741): pid=22679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664081.334:4249742): pid=22680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664081.334:4249743): pid=22679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664081.334:4249744): pid=22680 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258139 res=1
type=LOGIN msg=audit(1674664081.335:4249745): pid=22679 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258140 res=1
type=USER_START msg=audit(1674664081.365:4249746): pid=22680 uid=0 auid=1055 ses=258139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664081.365:4249747): pid=22679 uid=0 auid=0 ses=258140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664081.367:4249748): pid=22680 uid=0 auid=1055 ses=258139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664081.367:4249749): pid=22679 uid=0 auid=0 ses=258140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664081.417:4249750): pid=22679 uid=0 auid=0 ses=258140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664081.421:4249751): pid=22679 uid=0 auid=0 ses=258140 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664081.611:4249752): pid=22680 uid=0 auid=1055 ses=258139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664081.613:4249753): pid=22680 uid=0 auid=1055 ses=258139 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664109.319:4249754): avc: denied { read } for pid=22791 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664109.319:4249754): avc: denied { open } for pid=22791 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664109.319:4249754): arch=c000003e syscall=2 success=yes exit=18 a0=559e352fef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664109.319:4249754): proctitle="dovecot/auth"
type=AVC msg=audit(1674664109.319:4249755): avc: denied { getattr } for pid=22791 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664109.319:4249755): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe4a1b27d0 a2=7ffe4a1b27d0 a3=fffffc00 items=0 ppid=5547 pid=22791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664109.319:4249755): proctitle="dovecot/auth"
type=AVC msg=audit(1674664114.247:4249756): avc: denied { name_connect } for pid=22791 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664114.247:4249756): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe4a1b25c0 a2=10 a3=7ffe4a1b25bc items=0 ppid=5547 pid=22791 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664114.247:4249756): proctitle="dovecot/auth"
type=AVC msg=audit(1674664114.277:4249757): avc: denied { write } for pid=22805 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664114.277:4249757): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff03645a30 a2=6e a3=63d158b2 items=0 ppid=5547 pid=22805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664114.277:4249757): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674664141.629:4249758): pid=22888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664141.630:4249759): pid=22888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664141.630:4249760): pid=22888 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258141 res=1
type=USER_START msg=audit(1674664141.643:4249761): pid=22888 uid=0 auid=1055 ses=258141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664141.645:4249762): pid=22888 uid=0 auid=1055 ses=258141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664141.890:4249763): pid=22888 uid=0 auid=1055 ses=258141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664141.891:4249764): pid=22888 uid=0 auid=1055 ses=258141 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664201.917:4249765): pid=23101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664201.917:4249767): pid=23100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664201.917:4249766): pid=23099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664201.917:4249768): pid=23100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664201.917:4249769): pid=23099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664201.917:4249770): pid=23101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664201.917:4249771): pid=23101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258142 res=1
type=LOGIN msg=audit(1674664201.917:4249772): pid=23099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258144 res=1
type=LOGIN msg=audit(1674664201.917:4249773): pid=23100 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258143 res=1
type=USER_ACCT msg=audit(1674664201.928:4249774): pid=23098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664201.929:4249775): pid=23098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664201.929:4249776): pid=23098 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258145 res=1
type=USER_START msg=audit(1674664202.012:4249777): pid=23099 uid=0 auid=0 ses=258144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664202.013:4249778): pid=23100 uid=0 auid=0 ses=258143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664202.013:4249779): pid=23098 uid=0 auid=0 ses=258145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664202.014:4249780): pid=23101 uid=0 auid=1055 ses=258142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664202.015:4249781): pid=23099 uid=0 auid=0 ses=258144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664202.015:4249782): pid=23098 uid=0 auid=0 ses=258145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664202.015:4249783): pid=23100 uid=0 auid=0 ses=258143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664202.016:4249784): pid=23101 uid=0 auid=1055 ses=258142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664202.050:4249785): pid=23098 uid=0 auid=0 ses=258145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664202.058:4249786): pid=23098 uid=0 auid=0 ses=258145 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664202.363:4249787): pid=23101 uid=0 auid=1055 ses=258142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664202.369:4249788): pid=23101 uid=0 auid=1055 ses=258142 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664202.569:4249789): pid=23099 uid=0 auid=0 ses=258144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664202.570:4249790): pid=23099 uid=0 auid=0 ses=258144 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664202.709:4249791): avc: denied { write } for pid=22805 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664202.709:4249791): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff03645a30 a2=6e a3=63d1590a items=0 ppid=5547 pid=22805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664202.709:4249791): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674664205.368:4249792): pid=23100 uid=0 auid=0 ses=258143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664205.370:4249793): pid=23100 uid=0 auid=0 ses=258143 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674664253.998:4249794): pid=23299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664253.998:4249795): pid=23299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664253.998:4249796): pid=23299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674664254.336:4249797): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=23299 suid=74 rport=39776 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.75.11.56 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674664254.336:4249798): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=23299 suid=74 rport=39776 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.75.11.56 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664255.037:4249799): pid=23296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664255.037:4249800): pid=23296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674664255.038:4249801): pid=23296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23296 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674664261.389:4249802): pid=23323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664261.389:4249803): pid=23323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664261.390:4249804): pid=23323 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258146 res=1
type=USER_START msg=audit(1674664261.411:4249805): pid=23323 uid=0 auid=1055 ses=258146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664261.413:4249806): pid=23323 uid=0 auid=1055 ses=258146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664261.699:4249807): pid=23323 uid=0 auid=1055 ses=258146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664261.702:4249808): pid=23323 uid=0 auid=1055 ses=258146 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664301.391:4249809): avc: denied { read } for pid=23457 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664301.391:4249809): avc: denied { open } for pid=23457 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664301.391:4249809): arch=c000003e syscall=2 success=yes exit=18 a0=5557c3859f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=23457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664301.391:4249809): proctitle="dovecot/auth"
type=AVC msg=audit(1674664301.392:4249810): avc: denied { getattr } for pid=23457 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664301.392:4249810): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffe863b7c0 a2=7fffe863b7c0 a3=fffffc00 items=0 ppid=5547 pid=23457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664301.392:4249810): proctitle="dovecot/auth"
type=AVC msg=audit(1674664301.859:4249811): avc: denied { name_connect } for pid=23457 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664301.859:4249811): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffe863b5b0 a2=10 a3=7fffe863b5ac items=0 ppid=5547 pid=23457 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664301.859:4249811): proctitle="dovecot/auth"
type=AVC msg=audit(1674664304.702:4249812): avc: denied { write } for pid=23463 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664304.702:4249812): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdad48cc10 a2=6e a3=63d15970 items=0 ppid=5547 pid=23463 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664304.702:4249812): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674664321.721:4249813): pid=23629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664321.722:4249814): pid=23629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664321.722:4249815): pid=23629 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258147 res=1
type=USER_START msg=audit(1674664321.743:4249816): pid=23629 uid=0 auid=1055 ses=258147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664321.745:4249817): pid=23629 uid=0 auid=1055 ses=258147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664322.149:4249818): pid=23629 uid=0 auid=1055 ses=258147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664322.151:4249819): pid=23629 uid=0 auid=1055 ses=258147 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664360.971:4249820): avc: denied { read append } for pid=23512 comm="lmtp" name="maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664360.971:4249820): avc: denied { open } for pid=23512 comm="lmtp" path="/home/wwwtestugo/mail/maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664360.971:4249820): arch=c000003e syscall=2 success=yes exit=17 a0=55ed6d61bb40 a1=402 a2=7ffe1d9094c0 a3=fffff800 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664360.971:4249820): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664360.973:4249821): avc: denied { getattr } for pid=23512 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664360.973:4249821): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffe1d90a340 a2=7ffe1d90a340 a3=7ffe1d909da0 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664360.973:4249821): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664360.973:4249822): avc: denied { write } for pid=23512 comm="lmtp" name="dovecot.index" dev="vda1" ino=47725134 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664360.973:4249822): arch=c000003e syscall=2 success=yes exit=18 a0=55ed6d659be0 a1=2 a2=7ffe1d90a0e0 a3=7ffe1d909ba0 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664360.973:4249822): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664361.420:4249823): avc: denied { read write } for pid=23512 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664361.420:4249823): avc: denied { open } for pid=23512 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664361.420:4249823): arch=c000003e syscall=2 success=yes exit=19 a0=55ed6d64f2c0 a1=2 a2=7ffe1d90a360 a3=7ffe1d90a020 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664361.420:4249823): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664361.420:4249824): avc: denied { getattr } for pid=23512 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664361.420:4249824): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffe1d90a4c0 a2=7ffe1d90a4c0 a3=7ffe1d909ea0 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664361.420:4249824): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.111:4249825): avc: denied { write } for pid=23512 comm="lmtp" name="tmp" dev="vda1" ino=134000050 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674664364.111:4249825): avc: denied { add_name } for pid=23512 comm="lmtp" name="1674664360.M974712P23512.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674664364.111:4249825): avc: denied { create } for pid=23512 comm="lmtp" name="1674664360.M974712P23512.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664364.111:4249825): arch=c000003e syscall=2 success=yes exit=21 a0=55ed6d5b0ca0 a1=2c1 a2=1ff a3=7ffe1d909f60 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.111:4249825): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.114:4249826): avc: denied { remove_name } for pid=23512 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=48866233 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674664364.114:4249826): avc: denied { unlink } for pid=23512 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=48866233 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664364.114:4249826): arch=c000003e syscall=87 success=yes exit=0 a0=55ed6d5b0438 a1=7fe477f5d071 a2=c3 a3=1 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.114:4249826): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.285:4249827): avc: denied { rename } for pid=23512 comm="lmtp" name="1674664360.M974712P23512.host.nexidigital.com" dev="vda1" ino=130847623 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664364.285:4249827): arch=c000003e syscall=82 success=yes exit=0 a0=55ed6d5b0548 a1=55ed6d5b0590 a2=6a50 a3=7ffe1d909f20 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.285:4249827): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.287:4249828): avc: denied { read } for pid=23512 comm="lmtp" name="new" dev="vda1" ino=126223302 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674664364.287:4249828): arch=c000003e syscall=2 success=yes exit=21 a0=55ed6d65e4c0 a1=0 a2=55ed6d5b0410 a3=7ffe1d909f20 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.287:4249828): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.288:4249829): avc: denied { lock } for pid=23512 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664364.288:4249829): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffe1d90a300 a3=63d159ac items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.288:4249829): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.312:4249830): avc: denied { lock } for pid=23512 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.cache" dev="vda1" ino=47780298 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664364.312:4249830): arch=c000003e syscall=72 success=yes exit=0 a0=16 a1=7 a2=7ffe1d90a3f0 a3=63d159ac items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.312:4249830): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.312:4249831): avc: denied { append } for pid=23512 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=47780291 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664364.312:4249831): arch=c000003e syscall=2 success=yes exit=21 a0=55ed6e03dde0 a1=402 a2=7ffe1d90a3f0 a3=4 items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.312:4249831): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.477:4249832): avc: denied { link } for pid=23512 comm="lmtp" name=".temp.host.nexidigital.com.23512.d8d7ad505fd6b361" dev="vda1" ino=48866209 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664364.477:4249832): arch=c000003e syscall=86 success=yes exit=0 a0=55ed6d5b1368 a1=55ed6d5b12d8 a2=1 a3=63d159ac items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.477:4249832): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674664364.477:4249833): avc: denied { setattr } for pid=23512 comm="lmtp" name=".temp.host.nexidigital.com.23512.d8d7ad505fd6b361" dev="vda1" ino=48866209 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664364.477:4249833): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=417 a3=3b items=0 ppid=5547 pid=23512 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664364.477:4249833): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674664381.166:4249834): pid=23842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664381.167:4249835): pid=23842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664381.168:4249836): pid=23842 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258148 res=1
type=USER_START msg=audit(1674664381.181:4249837): pid=23842 uid=0 auid=1055 ses=258148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664381.182:4249838): pid=23842 uid=0 auid=1055 ses=258148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664381.432:4249839): pid=23842 uid=0 auid=1055 ses=258148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664381.434:4249840): pid=23842 uid=0 auid=1055 ses=258148 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664420.455:4249841): avc: denied { name_connect } for pid=23457 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664420.455:4249841): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7fffe863b5b0 a2=10 a3=7fffe863b5ac items=0 ppid=5547 pid=23457 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664420.455:4249841): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674664441.451:4249842): pid=24044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664441.452:4249843): pid=24044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664441.452:4249844): pid=24044 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258149 res=1
type=USER_START msg=audit(1674664441.465:4249845): pid=24044 uid=0 auid=1055 ses=258149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664441.467:4249846): pid=24044 uid=0 auid=1055 ses=258149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664441.738:4249847): pid=24044 uid=0 auid=1055 ses=258149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664441.740:4249848): pid=24044 uid=0 auid=1055 ses=258149 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664501.756:4249849): pid=24246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664501.756:4249850): pid=24247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664501.758:4249851): pid=24247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664501.758:4249852): pid=24246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664501.758:4249854): pid=24247 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258151 res=1
type=LOGIN msg=audit(1674664501.758:4249853): pid=24246 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258150 res=1
type=USER_ACCT msg=audit(1674664501.759:4249855): pid=24248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664501.759:4249856): pid=24248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664501.760:4249857): pid=24248 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258152 res=1
type=USER_ACCT msg=audit(1674664501.770:4249858): pid=24249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664501.770:4249859): pid=24249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664501.770:4249860): pid=24249 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258153 res=1
type=USER_START msg=audit(1674664501.820:4249861): pid=24248 uid=0 auid=0 ses=258152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664501.821:4249862): pid=24247 uid=0 auid=0 ses=258151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664501.822:4249863): pid=24249 uid=0 auid=1055 ses=258153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664501.822:4249864): pid=24246 uid=0 auid=0 ses=258150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664501.823:4249865): pid=24247 uid=0 auid=0 ses=258151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664501.823:4249866): pid=24249 uid=0 auid=1055 ses=258153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664501.823:4249867): pid=24246 uid=0 auid=0 ses=258150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664501.824:4249868): pid=24248 uid=0 auid=0 ses=258152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664501.931:4249869): pid=24247 uid=0 auid=0 ses=258151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664501.935:4249870): pid=24247 uid=0 auid=0 ses=258151 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664501.968:4249871): pid=24248 uid=0 auid=0 ses=258152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664501.970:4249872): pid=24248 uid=0 auid=0 ses=258152 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664502.180:4249873): pid=24249 uid=0 auid=1055 ses=258153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664502.181:4249874): pid=24249 uid=0 auid=1055 ses=258153 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664505.173:4249875): pid=24246 uid=0 auid=0 ses=258150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664505.174:4249876): pid=24246 uid=0 auid=0 ses=258150 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664539.391:4249877): avc: denied { read } for pid=24417 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664539.391:4249877): avc: denied { open } for pid=24417 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664539.391:4249877): arch=c000003e syscall=2 success=yes exit=18 a0=563e7e16ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=24417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664539.391:4249877): proctitle="dovecot/auth"
type=AVC msg=audit(1674664539.391:4249878): avc: denied { getattr } for pid=24417 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664539.391:4249878): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff052fda10 a2=7fff052fda10 a3=fffffc00 items=0 ppid=5547 pid=24417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664539.391:4249878): proctitle="dovecot/auth"
type=AVC msg=audit(1674664552.523:4249879): avc: denied { name_connect } for pid=24417 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664552.523:4249879): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff052fd800 a2=10 a3=7fff052fd7fc items=0 ppid=5547 pid=24417 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664552.523:4249879): proctitle="dovecot/auth"
type=AVC msg=audit(1674664552.551:4249880): avc: denied { write } for pid=24471 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664552.551:4249880): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffd3634de0 a2=6e a3=63d15a68 items=0 ppid=5547 pid=24471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664552.551:4249880): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674664561.193:4249881): pid=24512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664561.193:4249882): pid=24512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664561.194:4249883): pid=24512 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258154 res=1
type=USER_START msg=audit(1674664561.210:4249884): pid=24512 uid=0 auid=1055 ses=258154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664561.212:4249885): pid=24512 uid=0 auid=1055 ses=258154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664561.562:4249886): pid=24512 uid=0 auid=1055 ses=258154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664561.566:4249887): pid=24512 uid=0 auid=1055 ses=258154 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674664568.170:4249888): table=filter family=2 entries=1035
type=SYSCALL msg=audit(1674664568.170:4249888): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab05d7ff010 items=0 ppid=24541 pid=24546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664568.170:4249888): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003134302E3230362E3131382E3832002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674664585.585:4249889): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674664585.585:4249889): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab5e62f9010 items=0 ppid=24597 pid=24604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664585.585:4249889): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E31362E3230342E3636002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674664605.251:4249890): avc: denied { read append } for pid=24691 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664605.251:4249890): avc: denied { open } for pid=24691 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664605.251:4249890): arch=c000003e syscall=2 success=yes exit=8 a0=5579da85fa60 a1=402 a2=7ffc4d0c8610 a3=7ffc4d0c80a0 items=0 ppid=5547 pid=24691 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664605.251:4249890): proctitle="dovecot/imap"
type=AVC msg=audit(1674664605.252:4249891): avc: denied { getattr } for pid=24691 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664605.252:4249891): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc4d0c8570 a2=7ffc4d0c8570 a3=7ffc4d0c7fe0 items=0 ppid=5547 pid=24691 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664605.252:4249891): proctitle="dovecot/imap"
type=AVC msg=audit(1674664605.252:4249892): avc: denied { write } for pid=24691 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664605.252:4249892): arch=c000003e syscall=2 success=yes exit=10 a0=5579da861bc0 a1=2 a2=7ffc4d0c8310 a3=7ffc4d0c7da0 items=0 ppid=5547 pid=24691 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664605.252:4249892): proctitle="dovecot/imap"
type=AVC msg=audit(1674664605.252:4249893): avc: denied { lock } for pid=24691 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664605.252:4249893): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc4d0c8210 a3=63d15a9d items=0 ppid=5547 pid=24691 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664605.252:4249893): proctitle="dovecot/imap"
type=AVC msg=audit(1674664605.252:4249894): avc: denied { read } for pid=24691 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674664605.252:4249894): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5579da88d320 a2=90800 a3=0 items=0 ppid=5547 pid=24691 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664605.252:4249894): proctitle="dovecot/imap"
type=AVC msg=audit(1674664605.253:4249895): avc: denied { getattr } for pid=24691 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664605.253:4249895): arch=c000003e syscall=4 success=yes exit=0 a0=5579da84fa60 a1=7ffc4d0c85c0 a2=7ffc4d0c85c0 a3=6f632e6f72676173 items=0 ppid=5547 pid=24691 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664605.253:4249895): proctitle="dovecot/imap"
type=AVC msg=audit(1674664605.639:4249896): avc: denied { write } for pid=24471 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664605.639:4249896): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffd3634de0 a2=6e a3=63d15a9d items=0 ppid=5547 pid=24471 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664605.639:4249896): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674664606.942:4249897): avc: denied { write } for pid=24755 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674664606.942:4249897): arch=c000003e syscall=21 success=yes exit=0 a0=562c48a894c0 a1=2 a2=7b48 a3=7ffff17f17a0 items=0 ppid=5547 pid=24755 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664606.942:4249897): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674664621.585:4249898): pid=24839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664621.585:4249899): pid=24839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664621.585:4249900): pid=24839 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258155 res=1
type=USER_START msg=audit(1674664621.603:4249901): pid=24839 uid=0 auid=1055 ses=258155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664621.604:4249902): pid=24839 uid=0 auid=1055 ses=258155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664621.902:4249903): pid=24839 uid=0 auid=1055 ses=258155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664621.907:4249904): pid=24839 uid=0 auid=1055 ses=258155 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664681.924:4249905): pid=25041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664681.925:4249906): pid=25041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664681.926:4249907): pid=25041 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258156 res=1
type=USER_START msg=audit(1674664681.941:4249908): pid=25041 uid=0 auid=1055 ses=258156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664681.942:4249909): pid=25041 uid=0 auid=1055 ses=258156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664682.204:4249910): pid=25041 uid=0 auid=1055 ses=258156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664682.205:4249911): pid=25041 uid=0 auid=1055 ses=258156 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664698.225:4249912): avc: denied { name_connect } for pid=24417 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664698.225:4249912): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff052fd800 a2=10 a3=7fff052fd7fc items=0 ppid=5547 pid=24417 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664698.225:4249912): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674664741.222:4249913): pid=25240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664741.222:4249914): pid=25241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664741.222:4249915): pid=25240 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664741.222:4249916): pid=25241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664741.222:4249917): pid=25241 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258157 res=1
type=LOGIN msg=audit(1674664741.222:4249918): pid=25240 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258158 res=1
type=USER_START msg=audit(1674664741.255:4249919): pid=25241 uid=0 auid=1055 ses=258157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664741.255:4249920): pid=25240 uid=0 auid=0 ses=258158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664741.256:4249921): pid=25241 uid=0 auid=1055 ses=258157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664741.257:4249922): pid=25240 uid=0 auid=0 ses=258158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664741.553:4249923): pid=25241 uid=0 auid=1055 ses=258157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664741.556:4249924): pid=25241 uid=0 auid=1055 ses=258157 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664742.685:4249925): pid=25240 uid=0 auid=0 ses=258158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664742.686:4249926): pid=25240 uid=0 auid=0 ses=258158 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674664746.919:4249927): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674664746.919:4249927): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b27c2f98010 items=0 ppid=25278 pid=25283 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664746.919:4249927): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131362E3133312E3138382E3334002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674664801.702:4249928): pid=25455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664801.702:4249929): pid=25456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664801.702:4249930): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664801.702:4249931): pid=25456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664801.702:4249933): pid=25454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664801.702:4249932): pid=25455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664801.702:4249934): pid=25456 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258159 res=1
type=LOGIN msg=audit(1674664801.702:4249935): pid=25454 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258160 res=1
type=LOGIN msg=audit(1674664801.702:4249936): pid=25455 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258161 res=1
type=USER_START msg=audit(1674664801.749:4249937): pid=25455 uid=0 auid=0 ses=258161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664801.749:4249938): pid=25454 uid=0 auid=0 ses=258160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664801.752:4249939): pid=25455 uid=0 auid=0 ses=258161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664801.752:4249940): pid=25456 uid=0 auid=1055 ses=258159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664801.752:4249941): pid=25454 uid=0 auid=0 ses=258160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664801.754:4249942): pid=25456 uid=0 auid=1055 ses=258159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664801.802:4249943): pid=25454 uid=0 auid=0 ses=258160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664801.805:4249944): pid=25454 uid=0 auid=0 ses=258160 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664802.191:4249945): pid=25456 uid=0 auid=1055 ses=258159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664802.193:4249946): pid=25456 uid=0 auid=1055 ses=258159 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664805.209:4249947): pid=25455 uid=0 auid=0 ses=258161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664805.211:4249948): pid=25455 uid=0 auid=0 ses=258161 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664818.110:4249949): avc: denied { read } for pid=25524 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674664818.110:4249949): avc: denied { open } for pid=25524 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664818.110:4249949): arch=c000003e syscall=2 success=yes exit=18 a0=561bf8f9ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=25524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664818.110:4249949): proctitle="dovecot/auth"
type=AVC msg=audit(1674664818.110:4249950): avc: denied { getattr } for pid=25524 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674664818.110:4249950): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd909d0830 a2=7ffd909d0830 a3=fffffc00 items=0 ppid=5547 pid=25524 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664818.110:4249950): proctitle="dovecot/auth"
type=AVC msg=audit(1674664820.460:4249951): avc: denied { name_connect } for pid=25524 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664820.460:4249951): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd909d0620 a2=10 a3=7ffd909d061c items=0 ppid=5547 pid=25524 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664820.460:4249951): proctitle="dovecot/auth"
type=AVC msg=audit(1674664820.488:4249952): avc: denied { write } for pid=25532 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664820.488:4249952): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcad59fdf0 a2=6e a3=63d15b74 items=0 ppid=5547 pid=25532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664820.488:4249952): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674664829.441:4249953): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674664829.441:4249953): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae027d86010 items=0 ppid=25583 pid=25588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664829.441:4249953): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138322E3235332E3132362E313837002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=NETFILTER_CFG msg=audit(1674664844.743:4249954): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674664844.743:4249954): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b77ad236010 items=0 ppid=25627 pid=25632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664844.743:4249954): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132352E36362E3234332E31002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543136
type=USER_ACCT msg=audit(1674664861.232:4249955): pid=25687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664861.233:4249956): pid=25687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664861.234:4249957): pid=25687 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258162 res=1
type=USER_START msg=audit(1674664861.254:4249958): pid=25687 uid=0 auid=1055 ses=258162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664861.255:4249959): pid=25687 uid=0 auid=1055 ses=258162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664861.534:4249960): pid=25687 uid=0 auid=1055 ses=258162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664861.537:4249961): pid=25687 uid=0 auid=1055 ses=258162 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664901.971:4249962): avc: denied { name_connect } for pid=25524 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664901.971:4249962): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd909d0620 a2=10 a3=7ffd909d061c items=0 ppid=5547 pid=25524 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664901.971:4249962): proctitle="dovecot/auth"
type=AVC msg=audit(1674664906.215:4249963): avc: denied { write } for pid=25892 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664906.215:4249963): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcd47f2730 a2=6e a3=63d15bca items=0 ppid=5547 pid=25892 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664906.215:4249963): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674664921.558:4249964): pid=25985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664921.558:4249965): pid=25985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664921.559:4249966): pid=25985 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258163 res=1
type=USER_START msg=audit(1674664921.580:4249967): pid=25985 uid=0 auid=1055 ses=258163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664921.583:4249968): pid=25985 uid=0 auid=1055 ses=258163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664921.884:4249969): pid=25985 uid=0 auid=1055 ses=258163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664921.887:4249970): pid=25985 uid=0 auid=1055 ses=258163 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664981.903:4249971): pid=26178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674664981.903:4249972): pid=26178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674664981.903:4249973): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664981.903:4249974): pid=26178 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258164 res=1
type=CRED_ACQ msg=audit(1674664981.903:4249975): pid=26179 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674664981.903:4249976): pid=26179 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258165 res=1
type=USER_START msg=audit(1674664981.937:4249977): pid=26179 uid=0 auid=1055 ses=258165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664981.939:4249978): pid=26179 uid=0 auid=1055 ses=258165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674664981.939:4249979): pid=26178 uid=0 auid=0 ses=258164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674664981.941:4249980): pid=26178 uid=0 auid=0 ses=258164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664981.998:4249981): pid=26178 uid=0 auid=0 ses=258164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664982.000:4249982): pid=26178 uid=0 auid=0 ses=258164 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674664982.282:4249983): pid=26179 uid=0 auid=1055 ses=258165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674664982.284:4249984): pid=26179 uid=0 auid=1055 ses=258165 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674664992.037:4249985): avc: denied { name_connect } for pid=25524 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674664992.037:4249985): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd909d0620 a2=10 a3=7ffd909d061c items=0 ppid=5547 pid=25524 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664992.037:4249985): proctitle="dovecot/auth"
type=AVC msg=audit(1674664992.068:4249986): avc: denied { write } for pid=26225 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674664992.068:4249986): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff52205930 a2=6e a3=63d15c20 items=0 ppid=5547 pid=26225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674664992.068:4249986): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674665041.300:4249987): pid=26394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665041.300:4249988): pid=26394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665041.300:4249989): pid=26394 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258166 res=1
type=USER_START msg=audit(1674665041.317:4249990): pid=26394 uid=0 auid=1055 ses=258166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665041.319:4249991): pid=26394 uid=0 auid=1055 ses=258166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665041.628:4249992): pid=26394 uid=0 auid=1055 ses=258166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665041.630:4249993): pid=26394 uid=0 auid=1055 ses=258166 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674665101.644:4249994): pid=26579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665101.644:4249995): pid=26579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665101.644:4249996): pid=26579 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258167 res=1
type=USER_ACCT msg=audit(1674665101.644:4249997): pid=26580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665101.644:4249998): pid=26580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665101.644:4249999): pid=26580 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258168 res=1
type=USER_ACCT msg=audit(1674665101.644:4250000): pid=26581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665101.644:4250001): pid=26581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665101.644:4250002): pid=26581 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258169 res=1
type=USER_START msg=audit(1674665101.717:4250003): pid=26579 uid=0 auid=0 ses=258167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674665101.717:4250004): pid=26581 uid=0 auid=1055 ses=258169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674665101.718:4250005): pid=26580 uid=0 auid=0 ses=258168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665101.718:4250006): pid=26579 uid=0 auid=0 ses=258167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665101.718:4250007): pid=26581 uid=0 auid=1055 ses=258169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665101.718:4250008): pid=26580 uid=0 auid=0 ses=258168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665101.912:4250009): pid=26580 uid=0 auid=0 ses=258168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665101.926:4250010): pid=26580 uid=0 auid=0 ses=258168 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665102.075:4250011): pid=26581 uid=0 auid=1055 ses=258169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665102.077:4250012): pid=26581 uid=0 auid=1055 ses=258169 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665105.179:4250013): pid=26579 uid=0 auid=0 ses=258167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665105.181:4250014): pid=26579 uid=0 auid=0 ses=258167 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674665112.628:4250015): avc: denied { read } for pid=26632 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674665112.628:4250015): avc: denied { open } for pid=26632 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665112.628:4250015): arch=c000003e syscall=2 success=yes exit=18 a0=558b57f58f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=26632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665112.628:4250015): proctitle="dovecot/auth"
type=AVC msg=audit(1674665112.628:4250016): avc: denied { getattr } for pid=26632 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665112.628:4250016): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffda6576f10 a2=7ffda6576f10 a3=fffffc00 items=0 ppid=5547 pid=26632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665112.628:4250016): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674665161.199:4250017): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665161.199:4250018): pid=26806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665161.200:4250019): pid=26806 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258170 res=1
type=USER_START msg=audit(1674665161.218:4250020): pid=26806 uid=0 auid=1055 ses=258170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665161.219:4250021): pid=26806 uid=0 auid=1055 ses=258170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665161.529:4250022): pid=26806 uid=0 auid=1055 ses=258170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665161.532:4250023): pid=26806 uid=0 auid=1055 ses=258170 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674665167.885:4250024): avc: denied { name_connect } for pid=26632 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674665167.885:4250024): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffda6576d00 a2=10 a3=7ffda6576cfc items=0 ppid=5547 pid=26632 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665167.885:4250024): proctitle="dovecot/auth"
type=AVC msg=audit(1674665167.895:4250025): avc: denied { write } for pid=26638 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674665167.895:4250025): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc9f4ac7f0 a2=6e a3=63d15ccf items=0 ppid=5547 pid=26638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665167.895:4250025): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674665221.548:4250026): pid=27014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665221.548:4250027): pid=27014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665221.548:4250028): pid=27014 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258171 res=1
type=USER_START msg=audit(1674665221.567:4250029): pid=27014 uid=0 auid=1055 ses=258171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665221.568:4250030): pid=27014 uid=0 auid=1055 ses=258171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665222.006:4250031): pid=27014 uid=0 auid=1055 ses=258171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665222.015:4250032): pid=27014 uid=0 auid=1055 ses=258171 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674665273.072:4250033): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674665273.072:4250033): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b22b6c63010 items=0 ppid=27285 pid=27290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665273.072:4250033): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131332E3130312E3132352E313230002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674665281.035:4250034): pid=27315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665281.035:4250035): pid=27315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665281.036:4250036): pid=27315 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258172 res=1
type=USER_START msg=audit(1674665281.051:4250037): pid=27315 uid=0 auid=1055 ses=258172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665281.053:4250038): pid=27315 uid=0 auid=1055 ses=258172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665281.382:4250039): pid=27315 uid=0 auid=1055 ses=258172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665281.385:4250040): pid=27315 uid=0 auid=1055 ses=258172 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674665341.400:4250041): pid=27545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665341.400:4250042): pid=27545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665341.401:4250043): pid=27545 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258173 res=1
type=USER_START msg=audit(1674665341.413:4250044): pid=27545 uid=0 auid=1055 ses=258173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665341.414:4250045): pid=27545 uid=0 auid=1055 ses=258173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665341.754:4250046): pid=27545 uid=0 auid=1055 ses=258173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665341.757:4250047): pid=27545 uid=0 auid=1055 ses=258173 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674665362.102:4250048): avc: denied { write } for pid=26638 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674665362.102:4250048): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc9f4ac7f0 a2=6e a3=63d15d92 items=0 ppid=5547 pid=26638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665362.102:4250048): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674665365.603:4250049): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674665365.603:4250049): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b29311e7010 items=0 ppid=27625 pid=27630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665365.603:4250049): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E35362E3135352E313036002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674665377.433:4250050): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674665377.433:4250050): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b35350e6010 items=0 ppid=27686 pid=27691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665377.433:4250050): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034392E39312E3234332E3537002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543136
type=CRYPTO_KEY_USER msg=audit(1674665378.673:4250051): pid=27698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665378.673:4250052): pid=27698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665378.673:4250053): pid=27698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27698 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674665378.839:4250054): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=27698 suid=74 rport=34116 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674665378.839:4250055): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=27698 suid=74 rport=34116 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=USER_AUTH msg=audit(1674665381.477:4250056): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674665383.858:4250057): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674665384.187:4250058): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27698 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665384.187:4250059): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27698 suid=74 rport=34116 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665384.189:4250060): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665384.189:4250061): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665384.189:4250062): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674665384.189:4250063): pid=27682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=AVC msg=audit(1674665387.465:4250064): avc: denied { name_connect } for pid=26632 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674665387.465:4250064): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffda6576d00 a2=10 a3=7ffda6576cfc items=0 ppid=5547 pid=26632 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665387.465:4250064): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674665388.585:4250065): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674665388.585:4250065): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2baa330ff010 items=0 ppid=27759 pid=27765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665388.585:4250065): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650031342E33322E3234352E323338002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674665401.785:4250066): pid=27801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665401.785:4250067): pid=27801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665401.786:4250068): pid=27801 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258174 res=1
type=USER_ACCT msg=audit(1674665401.793:4250069): pid=27802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665401.793:4250070): pid=27802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665401.793:4250071): pid=27802 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258175 res=1
type=USER_ACCT msg=audit(1674665401.810:4250072): pid=27805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665401.810:4250073): pid=27805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674665401.817:4250074): pid=27803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665401.818:4250075): pid=27803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665401.819:4250076): pid=27803 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258176 res=1
type=LOGIN msg=audit(1674665401.821:4250077): pid=27805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258177 res=1
type=USER_START msg=audit(1674665401.881:4250078): pid=27803 uid=0 auid=0 ses=258176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674665401.881:4250079): pid=27801 uid=0 auid=0 ses=258174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674665401.885:4250080): pid=27805 uid=0 auid=1055 ses=258177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665401.885:4250081): pid=27801 uid=0 auid=0 ses=258174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665401.885:4250082): pid=27803 uid=0 auid=0 ses=258176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665401.885:4250083): pid=27805 uid=0 auid=1055 ses=258177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674665401.886:4250084): pid=27802 uid=0 auid=0 ses=258175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665401.890:4250085): pid=27802 uid=0 auid=0 ses=258175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665401.934:4250086): pid=27801 uid=0 auid=0 ses=258174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665401.937:4250087): pid=27801 uid=0 auid=0 ses=258174 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665402.006:4250088): pid=27803 uid=0 auid=0 ses=258176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665402.026:4250089): pid=27803 uid=0 auid=0 ses=258176 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665402.316:4250090): pid=27805 uid=0 auid=1055 ses=258177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665402.339:4250091): pid=27805 uid=0 auid=1055 ses=258177 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665405.290:4250092): pid=27802 uid=0 auid=0 ses=258175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665405.292:4250093): pid=27802 uid=0 auid=0 ses=258175 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674665408.501:4250094): avc: denied { write } for pid=26638 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674665408.501:4250094): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc9f4ac7f0 a2=6e a3=63d15dc0 items=0 ppid=5547 pid=26638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665408.501:4250094): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674665429.405:4250095): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665429.405:4250096): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665429.405:4250097): pid=27924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674665429.634:4250098): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=27924 suid=74 rport=63377 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=112.163.60.33 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674665429.635:4250099): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=27924 suid=74 rport=63377 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=112.163.60.33 terminal=? res=success'
type=USER_AUTH msg=audit(1674665430.687:4250100): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=112.163.60.33 addr=112.163.60.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674665432.797:4250101): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=112.163.60.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674665433.268:4250102): pid=27922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=112.163.60.33 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674665461.312:4250103): pid=28017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665461.312:4250104): pid=28017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665461.313:4250105): pid=28017 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258178 res=1
type=USER_START msg=audit(1674665461.330:4250106): pid=28017 uid=0 auid=1055 ses=258178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665461.332:4250107): pid=28017 uid=0 auid=1055 ses=258178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665461.601:4250108): pid=28017 uid=0 auid=1055 ses=258178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665461.603:4250109): pid=28017 uid=0 auid=1055 ses=258178 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674665521.397:4250110): avc: denied { read } for pid=28245 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674665521.397:4250110): avc: denied { open } for pid=28245 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665521.397:4250110): arch=c000003e syscall=2 success=yes exit=18 a0=55a1df3f5f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=28245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665521.397:4250110): proctitle="dovecot/auth"
type=AVC msg=audit(1674665521.398:4250111): avc: denied { getattr } for pid=28245 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665521.398:4250111): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe8d4ea660 a2=7ffe8d4ea660 a3=fffffc00 items=0 ppid=5547 pid=28245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665521.398:4250111): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674665521.619:4250112): pid=28246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665521.620:4250113): pid=28246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665521.620:4250114): pid=28246 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258179 res=1
type=USER_START msg=audit(1674665521.637:4250115): pid=28246 uid=0 auid=1055 ses=258179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665521.639:4250116): pid=28246 uid=0 auid=1055 ses=258179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665522.011:4250117): pid=28246 uid=0 auid=1055 ses=258179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665522.015:4250118): pid=28246 uid=0 auid=1055 ses=258179 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674665527.994:4250119): avc: denied { name_connect } for pid=28245 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674665527.994:4250119): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe8d4ea450 a2=10 a3=7ffe8d4ea44c items=0 ppid=5547 pid=28245 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665527.994:4250119): proctitle="dovecot/auth"
type=AVC msg=audit(1674665528.971:4250120): avc: denied { write } for pid=28274 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674665528.971:4250120): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc19364300 a2=6e a3=63d15e38 items=0 ppid=5547 pid=28274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665528.971:4250120): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674665532.674:4250121): avc: denied { read append } for pid=28276 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674665532.674:4250121): avc: denied { open } for pid=28276 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665532.674:4250121): arch=c000003e syscall=2 success=yes exit=8 a0=55d012ab8a60 a1=402 a2=7ffe35137230 a3=7ffe35136ca0 items=0 ppid=5547 pid=28276 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665532.674:4250121): proctitle="dovecot/imap"
type=AVC msg=audit(1674665532.674:4250122): avc: denied { getattr } for pid=28276 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665532.674:4250122): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe35137190 a2=7ffe35137190 a3=7ffe35136be0 items=0 ppid=5547 pid=28276 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665532.674:4250122): proctitle="dovecot/imap"
type=AVC msg=audit(1674665532.674:4250123): avc: denied { write } for pid=28276 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665532.674:4250123): arch=c000003e syscall=2 success=yes exit=10 a0=55d012abd960 a1=2 a2=7ffe35136f30 a3=7ffe351369e0 items=0 ppid=5547 pid=28276 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665532.674:4250123): proctitle="dovecot/imap"
type=AVC msg=audit(1674665532.674:4250124): avc: denied { lock } for pid=28276 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665532.674:4250124): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe35136e30 a3=63d15e3c items=0 ppid=5547 pid=28276 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665532.674:4250124): proctitle="dovecot/imap"
type=AVC msg=audit(1674665532.674:4250125): avc: denied { read } for pid=28276 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674665532.674:4250125): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55d012ae6300 a2=90800 a3=0 items=0 ppid=5547 pid=28276 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665532.674:4250125): proctitle="dovecot/imap"
type=AVC msg=audit(1674665532.675:4250126): avc: denied { getattr } for pid=28276 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665532.675:4250126): arch=c000003e syscall=4 success=yes exit=0 a0=55d012aa8a60 a1=7ffe351371e0 a2=7ffe351371e0 a3=6f632e6f72676173 items=0 ppid=5547 pid=28276 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665532.675:4250126): proctitle="dovecot/imap"
type=AVC msg=audit(1674665535.169:4250127): avc: denied { write } for pid=28391 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674665535.169:4250127): arch=c000003e syscall=21 success=yes exit=0 a0=55bac1d814c0 a1=2 a2=7b48 a3=7fff54780a60 items=0 ppid=5547 pid=28391 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665535.169:4250127): proctitle="dovecot/imap"
type=AVC msg=audit(1674665569.435:4250128): avc: denied { name_connect } for pid=28245 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674665569.435:4250128): arch=c000003e syscall=42 success=no exit=-115 a0=19 a1=7ffe8d4ea450 a2=10 a3=7ffe8d4ea44c items=0 ppid=5547 pid=28245 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665569.435:4250128): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674665581.031:4250129): pid=28537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665581.031:4250130): pid=28537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665581.031:4250131): pid=28537 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258180 res=1
type=USER_START msg=audit(1674665581.048:4250132): pid=28537 uid=0 auid=1055 ses=258180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665581.050:4250133): pid=28537 uid=0 auid=1055 ses=258180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665581.284:4250134): pid=28537 uid=0 auid=1055 ses=258180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665581.286:4250135): pid=28537 uid=0 auid=1055 ses=258180 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674665583.595:4250136): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674665583.595:4250136): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af4aafcc010 items=0 ppid=28557 pid=28562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665583.595:4250136): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3234392E3232352E3134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674665641.304:4250137): pid=28747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665641.304:4250138): pid=28747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665641.305:4250139): pid=28747 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258181 res=1
type=USER_START msg=audit(1674665641.319:4250140): pid=28747 uid=0 auid=1055 ses=258181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665641.321:4250141): pid=28747 uid=0 auid=1055 ses=258181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665641.592:4250142): pid=28747 uid=0 auid=1055 ses=258181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665641.594:4250143): pid=28747 uid=0 auid=1055 ses=258181 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674665701.611:4250144): pid=28943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665701.611:4250145): pid=28943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665701.611:4250146): pid=28943 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258182 res=1
type=USER_ACCT msg=audit(1674665701.613:4250147): pid=28942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665701.613:4250148): pid=28942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665701.613:4250149): pid=28942 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258183 res=1
type=USER_START msg=audit(1674665701.656:4250150): pid=28942 uid=0 auid=0 ses=258183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674665701.658:4250151): pid=28943 uid=0 auid=1055 ses=258182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665701.658:4250152): pid=28942 uid=0 auid=0 ses=258183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665701.658:4250153): pid=28943 uid=0 auid=1055 ses=258182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665702.091:4250154): pid=28943 uid=0 auid=1055 ses=258182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665702.094:4250155): pid=28943 uid=0 auid=1055 ses=258182 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665705.119:4250156): pid=28942 uid=0 auid=0 ses=258183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665705.122:4250157): pid=28942 uid=0 auid=0 ses=258183 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674665761.139:4250158): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665761.139:4250159): pid=29147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665761.139:4250160): pid=29147 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258184 res=1
type=USER_START msg=audit(1674665761.156:4250161): pid=29147 uid=0 auid=1055 ses=258184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665761.159:4250162): pid=29147 uid=0 auid=1055 ses=258184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665761.516:4250163): pid=29147 uid=0 auid=1055 ses=258184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665761.519:4250164): pid=29147 uid=0 auid=1055 ses=258184 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674665794.791:4250165): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665794.791:4250166): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665794.791:4250167): pid=29275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29275 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674665795.892:4250168): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=29275 suid=74 rport=50260 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674665795.892:4250169): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=29275 suid=74 rport=50260 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674665796.612:4250170): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674665798.301:4250171): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674665798.562:4250172): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29275 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665798.562:4250173): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29275 suid=74 rport=50260 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665798.563:4250174): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665798.563:4250175): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674665798.564:4250176): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29269 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674665798.564:4250177): pid=29269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674665821.534:4250178): pid=29354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665821.534:4250179): pid=29354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665821.536:4250180): pid=29354 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258185 res=1
type=USER_START msg=audit(1674665821.552:4250181): pid=29354 uid=0 auid=1055 ses=258185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665821.553:4250182): pid=29354 uid=0 auid=1055 ses=258185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665821.893:4250183): pid=29354 uid=0 auid=1055 ses=258185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665821.904:4250184): pid=29354 uid=0 auid=1055 ses=258185 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674665829.896:4250185): avc: denied { read } for pid=29407 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674665829.896:4250185): avc: denied { open } for pid=29407 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665829.896:4250185): arch=c000003e syscall=2 success=yes exit=18 a0=55cd815a9f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=29407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665829.896:4250185): proctitle="dovecot/auth"
type=AVC msg=audit(1674665829.896:4250186): avc: denied { getattr } for pid=29407 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674665829.896:4250186): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd6ac557e0 a2=7ffd6ac557e0 a3=fffffc00 items=0 ppid=5547 pid=29407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665829.896:4250186): proctitle="dovecot/auth"
type=AVC msg=audit(1674665830.474:4250187): avc: denied { name_connect } for pid=29407 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674665830.474:4250187): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd6ac555d0 a2=10 a3=7ffd6ac555cc items=0 ppid=5547 pid=29407 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665830.474:4250187): proctitle="dovecot/auth"
type=AVC msg=audit(1674665830.510:4250188): avc: denied { write } for pid=29437 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674665830.510:4250188): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe66ff92b0 a2=6e a3=63d15f66 items=0 ppid=5547 pid=29437 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665830.510:4250188): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674665845.741:4250189): avc: denied { name_connect } for pid=29407 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674665845.741:4250189): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffd6ac555d0 a2=10 a3=7ffd6ac555cc items=0 ppid=5547 pid=29407 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665845.741:4250189): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674665862.165:4250190): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674665862.165:4250190): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b43c7a68010 items=0 ppid=29606 pid=29611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674665862.165:4250190): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F7572636500312E3138302E3233302E3938002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543136
type=USER_ACCT msg=audit(1674665881.924:4250191): pid=29672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674665881.924:4250192): pid=29673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665881.924:4250194): pid=29673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665881.924:4250193): pid=29672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665881.924:4250195): pid=29672 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258186 res=1
type=LOGIN msg=audit(1674665881.924:4250196): pid=29673 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258187 res=1
type=USER_START msg=audit(1674665881.967:4250198): pid=29673 uid=0 auid=1055 ses=258187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674665881.967:4250197): pid=29672 uid=0 auid=0 ses=258186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665881.969:4250199): pid=29672 uid=0 auid=0 ses=258186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665881.970:4250200): pid=29673 uid=0 auid=1055 ses=258187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665882.017:4250201): pid=29672 uid=0 auid=0 ses=258186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665882.018:4250202): pid=29672 uid=0 auid=0 ses=258186 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665882.226:4250203): pid=29673 uid=0 auid=1055 ses=258187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665882.227:4250204): pid=29673 uid=0 auid=1055 ses=258187 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674665941.246:4250205): pid=29894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674665941.246:4250206): pid=29894 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674665941.248:4250207): pid=29894 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258188 res=1
type=USER_START msg=audit(1674665941.262:4250208): pid=29894 uid=0 auid=1055 ses=258188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674665941.262:4250209): pid=29894 uid=0 auid=1055 ses=258188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674665941.526:4250210): pid=29894 uid=0 auid=1055 ses=258188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674665941.527:4250211): pid=29894 uid=0 auid=1055 ses=258188 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666001.545:4250212): pid=30112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666001.545:4250213): pid=30111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666001.545:4250214): pid=30112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666001.545:4250215): pid=30111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666001.545:4250216): pid=30113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666001.545:4250217): pid=30112 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258189 res=1
type=LOGIN msg=audit(1674666001.545:4250218): pid=30111 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258190 res=1
type=CRED_ACQ msg=audit(1674666001.545:4250219): pid=30113 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666001.545:4250220): pid=30113 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258191 res=1
type=USER_START msg=audit(1674666001.597:4250221): pid=30111 uid=0 auid=0 ses=258190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666001.598:4250222): pid=30113 uid=0 auid=1055 ses=258191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666001.598:4250223): pid=30112 uid=0 auid=0 ses=258189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666001.598:4250224): pid=30113 uid=0 auid=1055 ses=258191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666001.598:4250226): pid=30111 uid=0 auid=0 ses=258190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666001.598:4250225): pid=30112 uid=0 auid=0 ses=258189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666001.641:4250227): pid=30111 uid=0 auid=0 ses=258190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666001.644:4250228): pid=30111 uid=0 auid=0 ses=258190 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666001.985:4250229): pid=30113 uid=0 auid=1055 ses=258191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666001.994:4250230): pid=30113 uid=0 auid=1055 ses=258191 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666005.016:4250231): pid=30112 uid=0 auid=0 ses=258189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666005.021:4250232): pid=30112 uid=0 auid=0 ses=258189 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666061.038:4250233): pid=30322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666061.038:4250234): pid=30323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666061.038:4250235): pid=30323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666061.038:4250236): pid=30322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666061.038:4250237): pid=30323 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258192 res=1
type=LOGIN msg=audit(1674666061.038:4250238): pid=30322 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258193 res=1
type=USER_START msg=audit(1674666061.068:4250239): pid=30322 uid=0 auid=0 ses=258193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666061.069:4250240): pid=30323 uid=0 auid=1055 ses=258192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666061.070:4250241): pid=30323 uid=0 auid=1055 ses=258192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666061.070:4250242): pid=30322 uid=0 auid=0 ses=258193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666061.097:4250243): pid=30322 uid=0 auid=0 ses=258193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666061.099:4250244): pid=30322 uid=0 auid=0 ses=258193 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666061.305:4250245): pid=30323 uid=0 auid=1055 ses=258192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666061.307:4250246): pid=30323 uid=0 auid=1055 ses=258192 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674666106.139:4250247): avc: denied { read } for pid=30483 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674666106.139:4250247): avc: denied { open } for pid=30483 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666106.139:4250247): arch=c000003e syscall=2 success=yes exit=18 a0=5597a0295f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666106.139:4250247): proctitle="dovecot/auth"
type=AVC msg=audit(1674666106.139:4250248): avc: denied { getattr } for pid=30483 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666106.139:4250248): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe9bac3940 a2=7ffe9bac3940 a3=fffffc00 items=0 ppid=5547 pid=30483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666106.139:4250248): proctitle="dovecot/auth"
type=AVC msg=audit(1674666110.230:4250249): avc: denied { name_connect } for pid=30483 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674666110.230:4250249): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe9bac3730 a2=10 a3=7ffe9bac372c items=0 ppid=5547 pid=30483 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666110.230:4250249): proctitle="dovecot/auth"
type=AVC msg=audit(1674666110.269:4250250): avc: denied { write } for pid=30500 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674666110.269:4250250): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffd9fe2720 a2=6e a3=63d1607e items=0 ppid=5547 pid=30500 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666110.269:4250250): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674666121.334:4250251): pid=30536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666121.335:4250252): pid=30536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666121.336:4250253): pid=30536 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258194 res=1
type=USER_START msg=audit(1674666121.375:4250254): pid=30536 uid=0 auid=1055 ses=258194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666121.377:4250255): pid=30536 uid=0 auid=1055 ses=258194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666121.731:4250256): pid=30536 uid=0 auid=1055 ses=258194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666121.734:4250257): pid=30536 uid=0 auid=1055 ses=258194 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666181.748:4250258): pid=30768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666181.748:4250259): pid=30768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666181.748:4250260): pid=30768 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258195 res=1
type=USER_START msg=audit(1674666181.763:4250261): pid=30768 uid=0 auid=1055 ses=258195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666181.764:4250262): pid=30768 uid=0 auid=1055 ses=258195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666182.073:4250263): pid=30768 uid=0 auid=1055 ses=258195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666182.075:4250264): pid=30768 uid=0 auid=1055 ses=258195 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674666209.706:4250265): avc: denied { read } for pid=30894 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674666209.706:4250265): avc: denied { open } for pid=30894 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666209.706:4250265): arch=c000003e syscall=2 success=yes exit=18 a0=55c365455f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666209.706:4250265): proctitle="dovecot/auth"
type=AVC msg=audit(1674666209.706:4250266): avc: denied { getattr } for pid=30894 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666209.706:4250266): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe250f5e90 a2=7ffe250f5e90 a3=fffffc00 items=0 ppid=5547 pid=30894 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666209.706:4250266): proctitle="dovecot/auth"
type=AVC msg=audit(1674666210.228:4250267): avc: denied { name_connect } for pid=30894 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674666210.228:4250267): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe250f5c80 a2=10 a3=7ffe250f5c7c items=0 ppid=5547 pid=30894 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666210.228:4250267): proctitle="dovecot/auth"
type=AVC msg=audit(1674666210.257:4250268): avc: denied { write } for pid=30927 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674666210.257:4250268): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc13801950 a2=6e a3=63d160e2 items=0 ppid=5547 pid=30927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666210.257:4250268): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674666241.092:4250269): pid=31067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666241.093:4250270): pid=31067 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666241.094:4250271): pid=31067 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258196 res=1
type=USER_START msg=audit(1674666241.108:4250272): pid=31067 uid=0 auid=1055 ses=258196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666241.110:4250273): pid=31067 uid=0 auid=1055 ses=258196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666241.354:4250274): pid=31067 uid=0 auid=1055 ses=258196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666241.356:4250275): pid=31067 uid=0 auid=1055 ses=258196 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674666279.640:4250276): pid=31193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666279.640:4250277): pid=31193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666279.640:4250278): pid=31193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31193 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666279.846:4250279): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=31193 suid=74 rport=47968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666279.846:4250280): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=31193 suid=74 rport=47968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=USER_AUTH msg=audit(1674666280.876:4250281): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=81.161.229.135 addr=81.161.229.135 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666283.011:4250282): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674666283.199:4250283): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31193 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666283.199:4250284): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31193 suid=74 rport=47968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666283.200:4250285): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666283.201:4250286): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666283.201:4250287): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31192 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674666283.201:4250288): pid=31192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674666301.374:4250291): pid=31256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666301.374:4250290): pid=31255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666301.374:4250289): pid=31257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666301.386:4250292): pid=31255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666301.386:4250293): pid=31257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666301.386:4250294): pid=31256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666301.386:4250296): pid=31257 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258197 res=1
type=LOGIN msg=audit(1674666301.386:4250295): pid=31255 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258198 res=1
type=LOGIN msg=audit(1674666301.386:4250297): pid=31256 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258199 res=1
type=USER_START msg=audit(1674666301.460:4250298): pid=31257 uid=0 auid=1055 ses=258197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666301.460:4250299): pid=31255 uid=0 auid=0 ses=258198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666301.460:4250300): pid=31256 uid=0 auid=0 ses=258199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666301.460:4250301): pid=31257 uid=0 auid=1055 ses=258197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666301.460:4250302): pid=31255 uid=0 auid=0 ses=258198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666301.462:4250303): pid=31256 uid=0 auid=0 ses=258199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666301.568:4250304): pid=31256 uid=0 auid=0 ses=258199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666301.581:4250305): pid=31256 uid=0 auid=0 ses=258199 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666301.923:4250306): pid=31257 uid=0 auid=1055 ses=258197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666301.938:4250307): pid=31257 uid=0 auid=1055 ses=258197 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666304.935:4250308): pid=31255 uid=0 auid=0 ses=258198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666304.937:4250309): pid=31255 uid=0 auid=0 ses=258198 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666361.955:4250310): pid=31463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666361.955:4250311): pid=31463 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666361.957:4250312): pid=31463 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258200 res=1
type=USER_START msg=audit(1674666361.975:4250313): pid=31463 uid=0 auid=1055 ses=258200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666361.977:4250314): pid=31463 uid=0 auid=1055 ses=258200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666362.266:4250315): pid=31463 uid=0 auid=1055 ses=258200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666362.267:4250316): pid=31463 uid=0 auid=1055 ses=258200 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666421.281:4250317): pid=31648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666421.281:4250318): pid=31648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666421.283:4250319): pid=31648 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258201 res=1
type=USER_START msg=audit(1674666421.298:4250320): pid=31648 uid=0 auid=1055 ses=258201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666421.299:4250321): pid=31648 uid=0 auid=1055 ses=258201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666421.588:4250322): pid=31648 uid=0 auid=1055 ses=258201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666421.590:4250323): pid=31648 uid=0 auid=1055 ses=258201 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674666427.967:4250324): avc: denied { read } for pid=31679 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674666427.967:4250324): avc: denied { open } for pid=31679 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666427.967:4250324): arch=c000003e syscall=2 success=yes exit=18 a0=562736155f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=31679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666427.967:4250324): proctitle="dovecot/auth"
type=AVC msg=audit(1674666427.967:4250325): avc: denied { getattr } for pid=31679 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666427.967:4250325): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff3e684bd0 a2=7fff3e684bd0 a3=fffffc00 items=0 ppid=5547 pid=31679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666427.967:4250325): proctitle="dovecot/auth"
type=AVC msg=audit(1674666432.819:4250326): avc: denied { name_connect } for pid=31679 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674666432.819:4250326): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff3e6849c0 a2=10 a3=7fff3e6849bc items=0 ppid=5547 pid=31679 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666432.819:4250326): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674666433.911:4250327): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674666433.911:4250327): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b59db40b010 items=0 ppid=31696 pid=31701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666433.911:4250327): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E39322E33392E323139002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674666451.363:4250328): avc: denied { name_connect } for pid=31679 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674666451.363:4250328): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff3e6849c0 a2=10 a3=7fff3e6849bc items=0 ppid=5547 pid=31679 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666451.363:4250328): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674666452.457:4250329): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674666452.457:4250329): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5d77a8a010 items=0 ppid=31782 pid=31787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666452.457:4250329): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035392E33372E3136392E3332002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543137
type=USER_ACCT msg=audit(1674666481.611:4250330): pid=31885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666481.611:4250331): pid=31885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666481.611:4250332): pid=31885 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258202 res=1
type=USER_START msg=audit(1674666481.630:4250333): pid=31885 uid=0 auid=1055 ses=258202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666481.632:4250334): pid=31885 uid=0 auid=1055 ses=258202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666481.928:4250335): pid=31885 uid=0 auid=1055 ses=258202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666481.929:4250336): pid=31885 uid=0 auid=1055 ses=258202 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674666486.221:4250337): avc: denied { write } for pid=31910 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674666486.221:4250337): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd789e8950 a2=6e a3=63d161f6 items=0 ppid=5547 pid=31910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666486.221:4250337): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674666488.516:4250338): avc: denied { read append } for pid=31918 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674666488.516:4250338): avc: denied { open } for pid=31918 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666488.516:4250338): arch=c000003e syscall=2 success=yes exit=8 a0=55ece724ca60 a1=402 a2=7ffe84871c70 a3=7ffe848716e0 items=0 ppid=5547 pid=31918 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666488.516:4250338): proctitle="dovecot/imap"
type=AVC msg=audit(1674666488.516:4250339): avc: denied { getattr } for pid=31918 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666488.516:4250339): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe84871bd0 a2=7ffe84871bd0 a3=7ffe84871620 items=0 ppid=5547 pid=31918 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666488.516:4250339): proctitle="dovecot/imap"
type=AVC msg=audit(1674666488.516:4250340): avc: denied { write } for pid=31918 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666488.516:4250340): arch=c000003e syscall=2 success=yes exit=10 a0=55ece7251960 a1=2 a2=7ffe84871970 a3=7ffe84871420 items=0 ppid=5547 pid=31918 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666488.516:4250340): proctitle="dovecot/imap"
type=AVC msg=audit(1674666488.516:4250341): avc: denied { lock } for pid=31918 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666488.516:4250341): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe84871870 a3=63d161f8 items=0 ppid=5547 pid=31918 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666488.516:4250341): proctitle="dovecot/imap"
type=AVC msg=audit(1674666488.516:4250342): avc: denied { read } for pid=31918 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674666488.516:4250342): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55ece727a300 a2=90800 a3=0 items=0 ppid=5547 pid=31918 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666488.516:4250342): proctitle="dovecot/imap"
type=AVC msg=audit(1674666488.517:4250343): avc: denied { getattr } for pid=31918 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666488.517:4250343): arch=c000003e syscall=4 success=yes exit=0 a0=55ece723ca60 a1=7ffe84871c20 a2=7ffe84871c20 a3=6f632e6f72676173 items=0 ppid=5547 pid=31918 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666488.517:4250343): proctitle="dovecot/imap"
type=AVC msg=audit(1674666504.788:4250344): avc: denied { write } for pid=31979 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674666504.788:4250344): arch=c000003e syscall=21 success=yes exit=0 a0=55f3aee264c0 a1=2 a2=7b48 a3=7ffd5738f7a0 items=0 ppid=5547 pid=31979 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666504.788:4250344): proctitle="dovecot/imap"
type=NETFILTER_CFG msg=audit(1674666540.146:4250345): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674666540.146:4250345): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5d099ed010 items=0 ppid=32222 pid=32227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666540.146:4250345): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E39342E36362E3734002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543137
type=USER_ACCT msg=audit(1674666541.952:4250346): pid=32233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666541.952:4250347): pid=32234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666541.953:4250348): pid=32234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666541.953:4250349): pid=32233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666541.954:4250350): pid=32233 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258203 res=1
type=LOGIN msg=audit(1674666541.954:4250351): pid=32234 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258204 res=1
type=USER_START msg=audit(1674666542.012:4250352): pid=32234 uid=0 auid=1055 ses=258204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666542.012:4250353): pid=32233 uid=0 auid=0 ses=258203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666542.015:4250354): pid=32234 uid=0 auid=1055 ses=258204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666542.015:4250355): pid=32233 uid=0 auid=0 ses=258203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666542.369:4250356): pid=32234 uid=0 auid=1055 ses=258204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666542.371:4250357): pid=32234 uid=0 auid=1055 ses=258204 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666543.056:4250358): pid=32233 uid=0 auid=0 ses=258203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666543.058:4250359): pid=32233 uid=0 auid=0 ses=258203 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674666546.784:4250360): avc: denied { write } for pid=31910 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674666546.784:4250360): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd789e8950 a2=6e a3=63d16232 items=0 ppid=5547 pid=31910 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666546.784:4250360): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674666601.074:4250363): pid=32476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666601.074:4250362): pid=32477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666601.074:4250361): pid=32478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666601.075:4250364): pid=32478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666601.075:4250365): pid=32476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666601.075:4250366): pid=32476 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258205 res=1
type=LOGIN msg=audit(1674666601.075:4250367): pid=32478 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258206 res=1
type=CRED_ACQ msg=audit(1674666601.075:4250368): pid=32477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666601.075:4250369): pid=32477 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258207 res=1
type=USER_START msg=audit(1674666601.116:4250370): pid=32476 uid=0 auid=0 ses=258205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666601.117:4250371): pid=32477 uid=0 auid=0 ses=258207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666601.117:4250372): pid=32478 uid=0 auid=1055 ses=258206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666601.118:4250373): pid=32477 uid=0 auid=0 ses=258207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666601.118:4250374): pid=32476 uid=0 auid=0 ses=258205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666601.119:4250375): pid=32478 uid=0 auid=1055 ses=258206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666601.150:4250376): pid=32476 uid=0 auid=0 ses=258205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666601.154:4250377): pid=32476 uid=0 auid=0 ses=258205 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666601.479:4250378): pid=32478 uid=0 auid=1055 ses=258206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666601.482:4250379): pid=32478 uid=0 auid=1055 ses=258206 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666604.495:4250380): pid=32477 uid=0 auid=0 ses=258207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666604.498:4250381): pid=32477 uid=0 auid=0 ses=258207 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674666641.257:4250382): avc: denied { read } for pid=32646 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674666641.257:4250382): avc: denied { open } for pid=32646 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666641.257:4250382): arch=c000003e syscall=2 success=yes exit=18 a0=562092217f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=32646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666641.257:4250382): proctitle="dovecot/auth"
type=AVC msg=audit(1674666641.258:4250383): avc: denied { getattr } for pid=32646 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666641.258:4250383): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff5e385e30 a2=7fff5e385e30 a3=fffffc00 items=0 ppid=5547 pid=32646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666641.258:4250383): proctitle="dovecot/auth"
type=AVC msg=audit(1674666643.216:4250384): avc: denied { name_connect } for pid=32646 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674666643.216:4250384): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff5e385c20 a2=10 a3=7fff5e385c1c items=0 ppid=5547 pid=32646 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666643.216:4250384): proctitle="dovecot/auth"
type=AVC msg=audit(1674666643.245:4250385): avc: denied { write } for pid=32653 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674666643.245:4250385): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff7afed1b0 a2=6e a3=63d16293 items=0 ppid=5547 pid=32653 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666643.245:4250385): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674666659.249:4250386): avc: denied { name_connect } for pid=32646 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674666659.249:4250386): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff5e385c20 a2=10 a3=7fff5e385c1c items=0 ppid=5547 pid=32646 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666659.249:4250386): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674666660.346:4250387): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674666660.346:4250387): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b57d665f010 items=0 ppid=32712 pid=32717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666660.346:4250387): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138322E3133342E3233392E3937002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674666661.518:4250388): pid=32722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666661.518:4250389): pid=32722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666661.520:4250390): pid=32722 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258208 res=1
type=USER_START msg=audit(1674666661.539:4250391): pid=32722 uid=0 auid=1055 ses=258208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666661.545:4250392): pid=32722 uid=0 auid=1055 ses=258208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666661.940:4250393): pid=32722 uid=0 auid=1055 ses=258208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666661.941:4250394): pid=32722 uid=0 auid=1055 ses=258208 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674666702.374:4250395): pid=412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666702.374:4250396): pid=412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666702.374:4250397): pid=412 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=412 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666702.584:4250398): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=412 suid=74 rport=50568 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.228.157.229 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666702.585:4250399): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=412 suid=74 rport=50568 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.228.157.229 terminal=? res=success'
type=USER_AUTH msg=audit(1674666704.104:4250400): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.228.157.229 addr=125.228.157.229 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666706.444:4250401): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.228.157.229 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666707.001:4250402): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.228.157.229 addr=125.228.157.229 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666709.085:4250403): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.228.157.229 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666709.635:4250404): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.228.157.229 addr=125.228.157.229 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666711.995:4250405): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.228.157.229 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666712.650:4250406): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.228.157.229 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666713.193:4250407): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.228.157.229 addr=125.228.157.229 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674666714.606:4250408): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674666714.606:4250408): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa834528010 items=0 ppid=474 pid=477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666714.606:4250408): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674666714.610:4250409): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674666714.610:4250409): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f14777a3010 items=0 ppid=474 pid=478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666714.610:4250409): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674666714.613:4250410): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674666714.613:4250410): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4dd18ad010 items=0 ppid=474 pid=479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666714.613:4250410): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674666714.617:4250411): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674666714.617:4250411): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7febd0734010 items=0 ppid=474 pid=480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666714.617:4250411): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674666714.908:4250412): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674666714.908:4250412): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f506ba0f010 items=0 ppid=474 pid=488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666714.908:4250412): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003134332E3139382E37372E313431002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674666714.915:4250413): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674666714.915:4250413): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe8ec053010 items=0 ppid=474 pid=489 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666714.915:4250413): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003134332E3139382E37372E313431002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674666714.921:4250414): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674666714.921:4250414): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f567460e010 items=0 ppid=474 pid=490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666714.921:4250414): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003132352E3232382E3135372E323239002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674666714.927:4250415): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674666714.927:4250415): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff46733b010 items=0 ppid=474 pid=491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666714.927:4250415): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003132352E3232382E3135372E323239002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674666715.102:4250416): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.228.157.229 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674666721.962:4250417): pid=520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666721.962:4250418): pid=520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666721.963:4250419): pid=520 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258209 res=1
type=USER_START msg=audit(1674666721.983:4250420): pid=520 uid=0 auid=1055 ses=258209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666721.985:4250421): pid=520 uid=0 auid=1055 ses=258209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666722.233:4250422): pid=520 uid=0 auid=1055 ses=258209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666722.236:4250423): pid=520 uid=0 auid=1055 ses=258209 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SERVICE_START msg=audit(1674666762.405:4250424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_STOP msg=audit(1674666762.405:4250425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-tmpfiles-clean comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674666781.255:4250426): pid=737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666781.255:4250427): pid=738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666781.255:4250428): pid=737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666781.255:4250429): pid=738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666781.255:4250430): pid=738 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258211 res=1
type=LOGIN msg=audit(1674666781.255:4250431): pid=737 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258210 res=1
type=USER_START msg=audit(1674666781.295:4250432): pid=738 uid=0 auid=1055 ses=258211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666781.295:4250433): pid=737 uid=0 auid=0 ses=258210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666781.299:4250434): pid=738 uid=0 auid=1055 ses=258211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666781.308:4250435): pid=737 uid=0 auid=0 ses=258210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666781.360:4250436): pid=737 uid=0 auid=0 ses=258210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666781.363:4250437): pid=737 uid=0 auid=0 ses=258210 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666781.672:4250438): pid=738 uid=0 auid=1055 ses=258211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666781.674:4250439): pid=738 uid=0 auid=1055 ses=258211 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674666783.312:4250440): avc: denied { read } for pid=760 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674666783.312:4250440): avc: denied { open } for pid=760 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666783.312:4250440): arch=c000003e syscall=2 success=yes exit=18 a0=560f42c97f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666783.312:4250440): proctitle="dovecot/auth"
type=AVC msg=audit(1674666783.313:4250441): avc: denied { getattr } for pid=760 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666783.313:4250441): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffda0b68420 a2=7ffda0b68420 a3=fffffc00 items=0 ppid=5547 pid=760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666783.313:4250441): proctitle="dovecot/auth"
type=AVC msg=audit(1674666785.030:4250442): avc: denied { name_connect } for pid=760 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674666785.030:4250442): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffda0b68210 a2=10 a3=7ffda0b6820c items=0 ppid=5547 pid=760 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666785.030:4250442): proctitle="dovecot/auth"
type=AVC msg=audit(1674666785.057:4250443): avc: denied { write } for pid=767 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674666785.057:4250443): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffceb8a2a00 a2=6e a3=63d16321 items=0 ppid=5547 pid=767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666785.057:4250443): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674666821.978:4250444): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666821.978:4250445): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666821.978:4250446): pid=901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=901 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666822.319:4250447): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=901 suid=74 rport=40228 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.135.64.125 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666822.319:4250448): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=901 suid=74 rport=40228 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.135.64.125 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666824.212:4250449): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=901 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666824.212:4250450): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=901 suid=74 rport=40228 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.135.64.125 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666824.213:4250451): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666824.213:4250452): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666824.213:4250453): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=900 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674666824.213:4250454): pid=900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.135.64.125 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674666841.697:4250455): pid=1059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666841.697:4250456): pid=1059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666841.698:4250457): pid=1059 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258212 res=1
type=USER_START msg=audit(1674666841.716:4250458): pid=1059 uid=0 auid=1055 ses=258212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666841.722:4250459): pid=1059 uid=0 auid=1055 ses=258212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666842.071:4250460): pid=1059 uid=0 auid=1055 ses=258212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666842.074:4250461): pid=1059 uid=0 auid=1055 ses=258212 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674666867.391:4250462): pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666867.391:4250463): pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666867.391:4250464): pid=1162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1162 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666867.395:4250465): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1162 suid=74 rport=35436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666867.395:4250466): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1162 suid=74 rport=35436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=USER_AUTH msg=audit(1674666869.777:4250467): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=107.189.30.59 addr=107.189.30.59 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666872.102:4250468): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674666872.820:4250469): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1162 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666872.820:4250470): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1162 suid=74 rport=35436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666872.821:4250471): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666872.821:4250472): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666872.821:4250473): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1159 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674666872.821:4250474): pid=1159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=ssh res=failed'
type=AVC msg=audit(1674666878.325:4250475): avc: denied { write } for pid=767 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674666878.325:4250475): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffceb8a2a10 a2=6e a3=63d1637e items=0 ppid=5547 pid=767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666878.325:4250475): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674666878.340:4250476): avc: denied { read append } for pid=977 comm="lmtp" name="maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674666878.340:4250476): avc: denied { open } for pid=977 comm="lmtp" path="/home/wwwtestugo/mail/maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666878.340:4250476): arch=c000003e syscall=2 success=yes exit=17 a0=55ad70e7f780 a1=402 a2=7ffd358b37c0 a3=fffff800 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666878.340:4250476): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674666878.343:4250477): avc: denied { getattr } for pid=977 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666878.343:4250477): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffd358b4640 a2=7ffd358b4640 a3=7ffd358b40a0 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666878.343:4250477): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674666878.343:4250478): avc: denied { write } for pid=977 comm="lmtp" name="dovecot.index" dev="vda1" ino=47725134 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666878.343:4250478): arch=c000003e syscall=2 success=yes exit=18 a0=55ad70ebdbe0 a1=2 a2=7ffd358b43e0 a3=7ffd358b3ea0 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666878.343:4250478): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674666878.798:4250479): avc: denied { read write } for pid=977 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674666878.798:4250479): avc: denied { open } for pid=977 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666878.798:4250479): arch=c000003e syscall=2 success=yes exit=19 a0=55ad70eb32c0 a1=2 a2=7ffd358b4660 a3=7ffd358b4320 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666878.798:4250479): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674666878.798:4250480): avc: denied { getattr } for pid=977 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666878.798:4250480): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffd358b47c0 a2=7ffd358b47c0 a3=7ffd358b41a0 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666878.798:4250480): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674666881.369:4250481): avc: denied { write } for pid=977 comm="lmtp" name="tmp" dev="vda1" ino=134000050 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674666881.369:4250481): avc: denied { add_name } for pid=977 comm="lmtp" name="1674666878.M343997P977.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674666881.369:4250481): avc: denied { create } for pid=977 comm="lmtp" name="1674666878.M343997P977.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666881.369:4250481): arch=c000003e syscall=2 success=yes exit=21 a0=55ad70e14ca8 a1=2c1 a2=1ff a3=7ffd358b4260 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666881.369:4250481): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674666881.444:4250482): avc: denied { lock } for pid=977 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666881.444:4250482): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffd358b4270 a3=63d16381 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666881.444:4250482): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674666881.738:4250483): avc: denied { remove_name } for pid=977 comm="lmtp" name="1674666878.M343997P977.host.nexidigital.com" dev="vda1" ino=130847638 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674666881.738:4250483): avc: denied { rename } for pid=977 comm="lmtp" name="1674666878.M343997P977.host.nexidigital.com" dev="vda1" ino=130847638 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674666881.738:4250483): arch=c000003e syscall=82 success=yes exit=0 a0=55ad70e145a0 a1=55ad70e145e8 a2=69f8 a3=7ffd358b4220 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666881.738:4250483): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674666881.741:4250484): avc: denied { read } for pid=977 comm="lmtp" name="new" dev="vda1" ino=126223302 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674666881.741:4250484): arch=c000003e syscall=2 success=yes exit=21 a0=55ad70ec24c0 a1=0 a2=0 a3=7ffd358b4220 items=0 ppid=5547 pid=977 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666881.741:4250484): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674666901.092:4250485): pid=1280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674666901.092:4250486): pid=1279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666901.092:4250487): pid=1280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666901.092:4250488): pid=1279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666901.093:4250489): pid=1280 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258213 res=1
type=LOGIN msg=audit(1674666901.093:4250490): pid=1279 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258214 res=1
type=USER_START msg=audit(1674666901.133:4250491): pid=1279 uid=0 auid=0 ses=258214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674666901.134:4250492): pid=1280 uid=0 auid=1055 ses=258213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666901.135:4250493): pid=1280 uid=0 auid=1055 ses=258213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666901.136:4250494): pid=1279 uid=0 auid=0 ses=258214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666901.483:4250495): pid=1280 uid=0 auid=1055 ses=258213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666901.492:4250496): pid=1280 uid=0 auid=1055 ses=258213 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666904.524:4250497): pid=1279 uid=0 auid=0 ses=258214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666904.526:4250498): pid=1279 uid=0 auid=0 ses=258214 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674666912.760:4250499): avc: denied { name_connect } for pid=760 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674666912.760:4250499): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffda0b68210 a2=10 a3=7ffda0b6820c items=0 ppid=5547 pid=760 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666912.760:4250499): proctitle="dovecot/auth"
type=AVC msg=audit(1674666912.774:4250500): avc: denied { write } for pid=767 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674666912.774:4250500): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffceb8a2a00 a2=6e a3=63d163a0 items=0 ppid=5547 pid=767 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674666912.774:4250500): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674666931.044:4250501): pid=1425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666931.044:4250502): pid=1425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666931.044:4250503): pid=1425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1425 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666931.264:4250504): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=1425 suid=74 rport=62763 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674666931.264:4250505): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=1425 suid=74 rport=62763 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=? res=success'
type=USER_AUTH msg=audit(1674666932.271:4250506): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=210.211.116.80 addr=210.211.116.80 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674666934.245:4250507): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674666934.477:4250508): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1425 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666934.477:4250509): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1425 suid=74 rport=62763 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666934.479:4250510): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666934.479:4250511): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674666934.479:4250512): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1424 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674666934.479:4250513): pid=1424 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674666961.547:4250514): pid=1522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674666961.548:4250515): pid=1522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674666961.549:4250516): pid=1522 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258215 res=1
type=USER_START msg=audit(1674666961.577:4250517): pid=1522 uid=0 auid=1055 ses=258215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674666961.582:4250518): pid=1522 uid=0 auid=1055 ses=258215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674666961.888:4250519): pid=1522 uid=0 auid=1055 ses=258215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674666961.890:4250520): pid=1522 uid=0 auid=1055 ses=258215 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674667021.906:4250521): pid=1733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667021.906:4250522): pid=1733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667021.906:4250523): pid=1733 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258216 res=1
type=USER_START msg=audit(1674667021.926:4250524): pid=1733 uid=0 auid=1055 ses=258216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667021.927:4250525): pid=1733 uid=0 auid=1055 ses=258216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667022.266:4250526): pid=1733 uid=0 auid=1055 ses=258216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667022.268:4250527): pid=1733 uid=0 auid=1055 ses=258216 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674667049.429:4250528): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674667049.429:4250528): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ba621667010 items=0 ppid=1882 pid=1887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667049.429:4250528): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138332E36342E36322E3334002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543137
type=USER_ACCT msg=audit(1674667081.284:4250529): pid=1980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667081.285:4250530): pid=1980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667081.285:4250531): pid=1980 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258217 res=1
type=USER_START msg=audit(1674667081.301:4250532): pid=1980 uid=0 auid=1055 ses=258217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667081.303:4250533): pid=1980 uid=0 auid=1055 ses=258217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667081.593:4250534): pid=1980 uid=0 auid=1055 ses=258217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667081.595:4250535): pid=1980 uid=0 auid=1055 ses=258217 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674667093.640:4250536): pid=2025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667093.640:4250537): pid=2025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667093.641:4250538): pid=2025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674667093.937:4250539): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=2025 suid=74 rport=60999 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674667093.937:4250540): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256@libssh.org spid=2025 suid=74 rport=60999 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=? res=success'
type=USER_AUTH msg=audit(1674667095.233:4250541): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=210.211.116.80 addr=210.211.116.80 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667097.253:4250542): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674667097.546:4250543): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2025 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667097.547:4250544): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2025 suid=74 rport=60999 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667097.548:4250545): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667097.548:4250546): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667097.548:4250547): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674667097.548:4250548): pid=2024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=210.211.116.80 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674667099.865:4250549): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674667099.865:4250549): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff4f6bf3010 items=0 ppid=2048 pid=2052 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667099.865:4250549): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674667099.870:4250550): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674667099.870:4250550): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f519590f010 items=0 ppid=2048 pid=2053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667099.870:4250550): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674667099.875:4250551): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674667099.875:4250551): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6ce0915010 items=0 ppid=2048 pid=2055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667099.875:4250551): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674667099.881:4250552): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674667099.881:4250552): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5164013010 items=0 ppid=2048 pid=2057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667099.881:4250552): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674667100.188:4250553): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674667100.188:4250553): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc4abe92010 items=0 ppid=2048 pid=2065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667100.188:4250553): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003130342E3234382E3134352E3739002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667100.194:4250554): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674667100.194:4250554): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f59217c6010 items=0 ppid=2048 pid=2066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667100.194:4250554): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003130342E3234382E3134352E3739002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674667100.200:4250555): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674667100.200:4250555): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2d15f72010 items=0 ppid=2048 pid=2067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667100.200:4250555): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003231302E3231312E3131362E3830002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667100.205:4250556): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674667100.205:4250556): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f78b4f42010 items=0 ppid=2048 pid=2068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667100.205:4250556): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003231302E3231312E3131362E3830002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674667141.614:4250557): pid=2221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667141.614:4250558): pid=2221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667141.614:4250559): pid=2221 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258218 res=1
type=USER_START msg=audit(1674667141.634:4250560): pid=2221 uid=0 auid=1055 ses=258218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667141.636:4250561): pid=2221 uid=0 auid=1055 ses=258218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667141.941:4250562): pid=2221 uid=0 auid=1055 ses=258218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667141.943:4250563): pid=2221 uid=0 auid=1055 ses=258218 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667182.620:4250564): avc: denied { read } for pid=2387 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674667182.620:4250564): avc: denied { open } for pid=2387 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667182.620:4250564): arch=c000003e syscall=2 success=yes exit=18 a0=563d6622ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667182.620:4250564): proctitle="dovecot/auth"
type=AVC msg=audit(1674667182.621:4250565): avc: denied { getattr } for pid=2387 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667182.621:4250565): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffedb9b7420 a2=7ffedb9b7420 a3=fffffc00 items=0 ppid=5547 pid=2387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667182.621:4250565): proctitle="dovecot/auth"
type=AVC msg=audit(1674667183.183:4250566): avc: denied { name_connect } for pid=2387 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667183.183:4250566): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffedb9b7210 a2=10 a3=7ffedb9b720c items=0 ppid=5547 pid=2387 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667183.183:4250566): proctitle="dovecot/auth"
type=AVC msg=audit(1674667183.214:4250567): avc: denied { write } for pid=2419 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667183.214:4250567): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc33a5f0a0 a2=6e a3=63d164af items=0 ppid=5547 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667183.214:4250567): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674667185.464:4250568): avc: denied { write } for pid=2419 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667185.464:4250568): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc33a5f0a0 a2=6e a3=63d164b1 items=0 ppid=5547 pid=2419 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667185.464:4250568): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674667201.966:4250569): pid=2528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667201.967:4250570): pid=2528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667201.967:4250571): pid=2528 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258219 res=1
type=USER_ACCT msg=audit(1674667201.970:4250572): pid=2530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667201.971:4250573): pid=2530 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667201.971:4250574): pid=2530 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258220 res=1
type=USER_ACCT msg=audit(1674667201.975:4250575): pid=2529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667201.975:4250576): pid=2529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667201.975:4250577): pid=2529 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258221 res=1
type=USER_ACCT msg=audit(1674667201.975:4250578): pid=2531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667201.976:4250579): pid=2531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667201.976:4250580): pid=2531 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258222 res=1
type=USER_START msg=audit(1674667202.055:4250581): pid=2530 uid=0 auid=0 ses=258220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674667202.056:4250582): pid=2529 uid=0 auid=0 ses=258221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674667202.056:4250583): pid=2531 uid=0 auid=1055 ses=258222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674667202.057:4250584): pid=2528 uid=0 auid=0 ses=258219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667202.058:4250586): pid=2531 uid=0 auid=1055 ses=258222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667202.058:4250585): pid=2530 uid=0 auid=0 ses=258220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667202.059:4250587): pid=2529 uid=0 auid=0 ses=258221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667202.060:4250588): pid=2528 uid=0 auid=0 ses=258219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667202.102:4250589): pid=2528 uid=0 auid=0 ses=258219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667202.108:4250590): pid=2528 uid=0 auid=0 ses=258219 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667202.171:4250591): pid=2530 uid=0 auid=0 ses=258220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667202.172:4250592): pid=2530 uid=0 auid=0 ses=258220 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667202.418:4250593): pid=2531 uid=0 auid=1055 ses=258222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667202.421:4250594): pid=2531 uid=0 auid=1055 ses=258222 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674667204.269:4250595): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674667204.269:4250595): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4c605b9010 items=0 ppid=1588 pid=2566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.269:4250595): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035392E3137322E3233342E3235302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A32353A3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.275:4250596): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674667204.275:4250596): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2abf1d2ad010 items=0 ppid=1588 pid=2567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.275:4250596): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131392E3136332E3139392E3132332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A33363A3433002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.279:4250597): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674667204.279:4250597): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b67f23fc010 items=0 ppid=1588 pid=2568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.279:4250597): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132342E3136332E3234392E31332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A34313A3033002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.284:4250598): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674667204.284:4250598): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b396c4c3010 items=0 ppid=1588 pid=2569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.284:4250598): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3136352E3134362E33302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A34373A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.288:4250599): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674667204.288:4250599): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2acc10e88010 items=0 ppid=1588 pid=2570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.288:4250599): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138332E3133342E38392E3234372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A35303A3339002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.293:4250600): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674667204.293:4250600): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b3297a0a010 items=0 ppid=1588 pid=2571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.293:4250600): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131352E3233382E3139312E3234362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A35323A3134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.298:4250601): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674667204.298:4250601): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b8f3a191010 items=0 ppid=1588 pid=2572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.298:4250601): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138332E3136372E3231372E38362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431363A35373A3136002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.302:4250602): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674667204.302:4250602): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b403e328010 items=0 ppid=1588 pid=2573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.302:4250602): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131382E3139342E3234372E32392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A30303A3532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.307:4250603): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674667204.307:4250603): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b173a4c0010 items=0 ppid=1588 pid=2574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.307:4250603): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003230332E39392E3131332E3132322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A30333A3339002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.311:4250604): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674667204.311:4250604): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b57c68f7010 items=0 ppid=1588 pid=2575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.311:4250604): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138332E36332E3139362E35382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A30353A3431002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.316:4250605): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674667204.316:4250605): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b29e01fb010 items=0 ppid=1588 pid=2576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.316:4250605): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730032372E3138352E32322E34342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A31313A3235002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.321:4250606): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674667204.321:4250606): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad81dac7010 items=0 ppid=1588 pid=2577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.321:4250606): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131372E37312E35332E3231302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A31313A3539002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.326:4250607): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674667204.326:4250607): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2afb48612010 items=0 ppid=1588 pid=2578 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.326:4250607): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131362E362E31372E3232312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A31353A3035002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.332:4250608): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674667204.332:4250608): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ae80bc70010 items=0 ppid=1588 pid=2579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.332:4250608): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033362E372E3133372E3130392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A31363A3033002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667204.336:4250609): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674667204.336:4250609): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4eda2fc010 items=0 ppid=1588 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667204.336:4250609): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E37362E3130342E31322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A31383A3332002D6A0044524F50
type=CRED_DISP msg=audit(1674667205.459:4250610): pid=2529 uid=0 auid=0 ses=258221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667205.460:4250611): pid=2529 uid=0 auid=0 ses=258221 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667206.864:4250612): avc: denied { name_connect } for pid=2387 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667206.864:4250612): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffedb9b7210 a2=10 a3=7ffedb9b720c items=0 ppid=5547 pid=2387 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667206.864:4250612): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674667207.968:4250613): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674667207.968:4250613): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2adb55460010 items=0 ppid=2590 pid=2595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667207.968:4250613): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232312E31332E3133382E313338002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674667227.204:4250614): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674667227.204:4250614): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad91ddb2010 items=0 ppid=2676 pid=2681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667227.204:4250614): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3134332E3131342E323530002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674667261.481:4250615): pid=2784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667261.481:4250616): pid=2784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667261.483:4250617): pid=2784 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258223 res=1
type=USER_START msg=audit(1674667261.501:4250618): pid=2784 uid=0 auid=1055 ses=258223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667261.503:4250619): pid=2784 uid=0 auid=1055 ses=258223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667261.876:4250620): pid=2784 uid=0 auid=1055 ses=258223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667261.878:4250621): pid=2784 uid=0 auid=1055 ses=258223 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674667265.358:4250622): pid=2807 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.359:4250623): pid=2807 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.359:4250624): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.379:4250625): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.382:4250626): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.382:4250627): pid=2807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.404:4250628): pid=2813 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.404:4250629): pid=2813 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.404:4250630): pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.419:4250631): pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.422:4250632): pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.422:4250633): pid=2813 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.442:4250634): pid=2819 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.442:4250635): pid=2819 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.443:4250636): pid=2819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.456:4250637): pid=2819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.459:4250638): pid=2819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.459:4250639): pid=2819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.578:4250640): pid=2824 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.578:4250641): pid=2824 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.578:4250642): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.592:4250643): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.594:4250644): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.594:4250645): pid=2824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.615:4250646): pid=2830 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.615:4250647): pid=2830 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.615:4250648): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.628:4250649): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.631:4250650): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.631:4250651): pid=2830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.653:4250652): pid=2834 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.653:4250653): pid=2834 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.653:4250654): pid=2834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.666:4250655): pid=2834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.669:4250656): pid=2834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.669:4250657): pid=2834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.699:4250658): pid=2840 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.699:4250659): pid=2840 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.699:4250660): pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.713:4250661): pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.716:4250662): pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.716:4250663): pid=2840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.739:4250664): pid=2844 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.739:4250665): pid=2844 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.739:4250666): pid=2844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.752:4250667): pid=2844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.755:4250668): pid=2844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.755:4250669): pid=2844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.776:4250670): pid=2851 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.776:4250671): pid=2851 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.776:4250672): pid=2851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.789:4250673): pid=2851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.792:4250674): pid=2851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.793:4250675): pid=2851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.814:4250676): pid=2856 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.814:4250677): pid=2856 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.814:4250678): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.829:4250679): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.832:4250680): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.832:4250681): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667265.853:4250682): pid=2861 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667265.854:4250683): pid=2861 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674667265.854:4250684): pid=2861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667265.867:4250685): pid=2861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667265.871:4250686): pid=2861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667265.871:4250687): pid=2861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667267.415:4250688): pid=2871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667267.415:4250689): pid=2871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667267.416:4250690): pid=2871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2871 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674667267.744:4250691): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=2871 suid=74 rport=44462 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674667267.745:4250692): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=2871 suid=74 rport=44462 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=? res=success'
type=USER_ACCT msg=audit(1674667268.477:4250693): pid=2874 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667268.478:4250694): pid=2874 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674667268.478:4250695): pid=2874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667268.495:4250696): pid=2874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667268.566:4250697): pid=2874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667268.567:4250698): pid=2874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667268.607:4250699): pid=2880 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667268.608:4250700): pid=2880 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674667268.608:4250701): pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667268.621:4250702): pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667268.708:4250703): pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667268.709:4250704): pid=2880 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667268.734:4250705): pid=2888 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667268.734:4250706): pid=2888 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674667268.734:4250707): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667268.749:4250708): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667268.885:4250709): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667268.885:4250710): pid=2888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667268.931:4250711): pid=2893 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667268.931:4250712): pid=2893 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674667268.932:4250713): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667268.946:4250714): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667268.949:4250715): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667268.949:4250716): pid=2893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667268.973:4250717): pid=2898 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667268.973:4250718): pid=2898 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D72664A48655543504A366B6E36556D332E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674667268.974:4250719): pid=2898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667268.988:4250720): pid=2898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667268.991:4250721): pid=2898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667268.991:4250722): pid=2898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667269.014:4250723): pid=2903 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667269.015:4250724): pid=2903 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D72664A48655543504A366B6E36556D332E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674667269.015:4250725): pid=2903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667269.036:4250726): pid=2903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667269.043:4250727): pid=2903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667269.043:4250728): pid=2903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667269.068:4250729): pid=2908 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667269.068:4250730): pid=2908 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D72664A48655543504A366B6E36556D332E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674667269.069:4250731): pid=2908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667269.082:4250732): pid=2908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667269.085:4250733): pid=2908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667269.085:4250734): pid=2908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667269.107:4250735): pid=2914 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667269.107:4250736): pid=2914 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674667269.107:4250737): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667269.121:4250738): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667269.127:4250739): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667269.127:4250740): pid=2914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674667269.204:4250741): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=181.57.193.186 addr=181.57.193.186 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674667269.504:4250742): pid=2922 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667269.504:4250743): pid=2922 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674667269.505:4250744): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667269.521:4250745): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667269.524:4250746): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667269.524:4250747): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667270.583:4250748): pid=2931 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667270.583:4250749): pid=2931 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674667270.584:4250750): pid=2931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667270.598:4250751): pid=2931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667270.601:4250752): pid=2931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667270.601:4250753): pid=2931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667270.622:4250754): pid=2936 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667270.622:4250755): pid=2936 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674667270.623:4250756): pid=2936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667270.636:4250757): pid=2936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667270.639:4250758): pid=2936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667270.639:4250759): pid=2936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667270.663:4250760): pid=2941 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667270.663:4250761): pid=2941 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674667270.663:4250762): pid=2941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667270.677:4250763): pid=2941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667270.680:4250764): pid=2941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667270.680:4250765): pid=2941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667270.709:4250766): pid=2946 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667270.709:4250767): pid=2946 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674667270.710:4250768): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667270.723:4250769): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667270.882:4250770): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667270.882:4250771): pid=2946 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674667271.108:4250772): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674667271.712:4250773): pid=2955 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667271.712:4250774): pid=2955 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674667271.713:4250775): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667271.733:4250776): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667271.809:4250777): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667271.809:4250778): pid=2955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667271.852:4250779): pid=2960 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667271.853:4250780): pid=2960 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F77777765766D686F6E64612F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F77777765766D686F6E64612F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674667271.853:4250781): pid=2960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667271.878:4250782): pid=2960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667273.102:4250783): pid=2960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667273.102:4250784): pid=2960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674667273.117:4250785): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=181.57.193.186 addr=181.57.193.186 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674667273.306:4250786): pid=2969 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667273.306:4250787): pid=2969 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674667273.307:4250788): pid=2969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667273.323:4250789): pid=2969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667274.544:4250790): pid=2969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667274.544:4250791): pid=2969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667274.785:4250792): pid=2983 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667274.786:4250793): pid=2983 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674667274.786:4250794): pid=2983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667274.799:4250795): pid=2983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674667275.573:4250796): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667276.400:4250797): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=181.57.193.186 addr=181.57.193.186 terminal=ssh res=failed'
type=USER_END msg=audit(1674667276.447:4250798): pid=2983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667276.447:4250799): pid=2983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667276.712:4250800): pid=2995 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667276.712:4250801): pid=2995 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674667276.712:4250802): pid=2995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667276.727:4250803): pid=2995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667277.944:4250804): pid=2995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667277.944:4250805): pid=2995 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667278.037:4250806): pid=3007 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667278.037:4250807): pid=3007 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674667278.038:4250808): pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667278.052:4250809): pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674667278.434:4250810): pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667278.434:4250811): pid=3007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667278.572:4250812): pid=3014 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667278.572:4250813): pid=3014 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674667278.572:4250814): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667278.587:4250815): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674667278.600:4250816): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667279.340:4250817): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=181.57.193.186 addr=181.57.193.186 terminal=ssh res=failed'
type=USER_END msg=audit(1674667280.752:4250818): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667280.752:4250819): pid=3014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667281.020:4250820): pid=3034 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667281.020:4250821): pid=3034 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674667281.021:4250822): pid=3034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667281.034:4250823): pid=3034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674667281.951:4250824): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=ssh res=failed'
type=USER_END msg=audit(1674667282.241:4250825): pid=3034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667282.241:4250826): pid=3034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667282.448:4250827): pid=3046 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667282.448:4250828): pid=3046 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674667282.449:4250829): pid=3046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667282.465:4250830): pid=3046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674667283.173:4250831): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=181.57.193.186 addr=181.57.193.186 terminal=ssh res=failed'
type=USER_END msg=audit(1674667283.583:4250832): pid=3046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667283.583:4250833): pid=3046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667284.523:4250834): pid=3059 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674667284.524:4250835): pid=3059 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674667284.524:4250836): pid=3059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674667284.540:4250837): pid=3059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674667284.665:4250838): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674667285.279:4250839): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674667285.279:4250839): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcfaf9d1010 items=0 ppid=3072 pid=3075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667285.279:4250839): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674667285.283:4250840): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674667285.283:4250840): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3e0a0af010 items=0 ppid=3072 pid=3076 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667285.283:4250840): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674667285.287:4250841): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674667285.287:4250841): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff52db26010 items=0 ppid=3072 pid=3077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667285.287:4250841): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674667285.292:4250842): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674667285.292:4250842): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9aadeee010 items=0 ppid=3072 pid=3078 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667285.292:4250842): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=USER_AUTH msg=audit(1674667285.534:4250843): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=181.57.193.186 addr=181.57.193.186 terminal=ssh res=failed'
type=USER_END msg=audit(1674667285.584:4250844): pid=3059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674667285.584:4250845): pid=3059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1674667285.633:4250846): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674667285.633:4250846): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f45034e2010 items=0 ppid=3072 pid=3090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667285.633:4250846): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730038372E3234362E372E323239002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667285.639:4250847): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674667285.639:4250847): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1d8db9f010 items=0 ppid=3072 pid=3091 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667285.639:4250847): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640038372E3234362E372E323239002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674667285.645:4250848): table=filter family=2 entries=1036
type=SYSCALL msg=audit(1674667285.645:4250848): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f06eed4e010 items=0 ppid=3072 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667285.645:4250848): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138312E35372E3139332E313836002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667285.651:4250849): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674667285.651:4250849): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc5aa579010 items=0 ppid=3072 pid=3093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667285.651:4250849): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138312E35372E3139332E313836002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674667287.970:4250850): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667287.970:4250851): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=maxtries exceeded acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674667287.970:4250852): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2871 suid=74 rport=44462 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667287.971:4250853): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2871 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667287.972:4250854): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667287.972:4250855): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667287.972:4250856): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2868 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674667287.972:4250857): pid=2868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=181.57.193.186 terminal=ssh res=failed'
type=AVC msg=audit(1674667311.334:4250858): avc: denied { read } for pid=3187 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674667311.334:4250858): avc: denied { open } for pid=3187 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667311.334:4250858): arch=c000003e syscall=2 success=yes exit=18 a0=55a4c37adf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667311.334:4250858): proctitle="dovecot/auth"
type=AVC msg=audit(1674667311.334:4250859): avc: denied { getattr } for pid=3187 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667311.334:4250859): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe2a306a50 a2=7ffe2a306a50 a3=fffffc00 items=0 ppid=5547 pid=3187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667311.334:4250859): proctitle="dovecot/auth"
type=AVC msg=audit(1674667313.285:4250860): avc: denied { name_connect } for pid=3187 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667313.285:4250860): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe2a306840 a2=10 a3=7ffe2a30683c items=0 ppid=5547 pid=3187 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667313.285:4250860): proctitle="dovecot/auth"
type=AVC msg=audit(1674667313.312:4250861): avc: denied { write } for pid=3193 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667313.312:4250861): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5c463300 a2=6e a3=63d16531 items=0 ppid=5547 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667313.312:4250861): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674667315.359:4250862): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667315.360:4250863): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667315.360:4250864): pid=3202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3202 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674667315.595:4250865): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=3202 suid=74 rport=50132 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=71.243.132.47 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674667315.595:4250866): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=3202 suid=74 rport=50132 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=71.243.132.47 terminal=? res=success'
type=USER_AUTH msg=audit(1674667317.401:4250867): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=71.243.132.47 addr=71.243.132.47 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667318.563:4250868): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=71.243.132.47 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674667318.816:4250869): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3202 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667318.816:4250870): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=3202 suid=74 rport=50132 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=71.243.132.47 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667318.817:4250871): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667318.817:4250872): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667318.817:4250873): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3195 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674667318.817:4250874): pid=3195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=71.243.132.47 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674667321.898:4250875): pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667321.898:4250876): pid=3219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667321.900:4250877): pid=3219 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258224 res=1
type=USER_START msg=audit(1674667321.917:4250878): pid=3219 uid=0 auid=1055 ses=258224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667321.918:4250879): pid=3219 uid=0 auid=1055 ses=258224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667322.177:4250880): pid=3219 uid=0 auid=1055 ses=258224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667322.180:4250881): pid=3219 uid=0 auid=1055 ses=258224 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667331.570:4250882): avc: denied { name_connect } for pid=3187 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667331.570:4250882): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe2a306840 a2=10 a3=7ffe2a30683c items=0 ppid=5547 pid=3187 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667331.570:4250882): proctitle="dovecot/auth"
type=AVC msg=audit(1674667331.583:4250883): avc: denied { write } for pid=3193 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667331.583:4250883): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5c463300 a2=6e a3=63d16543 items=0 ppid=5547 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667331.583:4250883): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674667372.005:4250884): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674667372.005:4250884): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b727d47e010 items=0 ppid=3399 pid=3404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667372.005:4250884): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650038372E3234362E372E323239002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543137
type=NETFILTER_CFG msg=audit(1674667374.763:4250885): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674667374.763:4250885): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb080d43010 items=0 ppid=3417 pid=3420 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667374.763:4250885): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674667374.767:4250886): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674667374.767:4250886): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feccf608010 items=0 ppid=3417 pid=3421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667374.767:4250886): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674667374.771:4250887): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674667374.771:4250887): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6cb44e1010 items=0 ppid=3417 pid=3422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667374.771:4250887): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674667374.775:4250888): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674667374.775:4250888): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcc24d0f010 items=0 ppid=3417 pid=3423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667374.775:4250888): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674667375.073:4250889): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674667375.073:4250889): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff8ae59b010 items=0 ppid=3417 pid=3431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667375.073:4250889): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003136332E3137322E34352E3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667375.079:4250890): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674667375.079:4250890): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f42e796e010 items=0 ppid=3417 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667375.079:4250890): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003136332E3137322E34352E3434002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674667375.084:4250891): table=filter family=2 entries=1037
type=SYSCALL msg=audit(1674667375.084:4250891): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2035f64010 items=0 ppid=3417 pid=3433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667375.084:4250891): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038372E3234362E372E323239002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667375.089:4250892): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674667375.089:4250892): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f245bb11010 items=0 ppid=3417 pid=3434 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667375.089:4250892): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038372E3234362E372E323239002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674667381.199:4250893): pid=3456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667381.199:4250894): pid=3456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667381.201:4250895): pid=3456 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258225 res=1
type=USER_START msg=audit(1674667381.217:4250896): pid=3456 uid=0 auid=1055 ses=258225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667381.219:4250897): pid=3456 uid=0 auid=1055 ses=258225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667381.538:4250898): pid=3456 uid=0 auid=1055 ses=258225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667381.540:4250899): pid=3456 uid=0 auid=1055 ses=258225 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674667384.279:4250900): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674667384.279:4250900): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b704c72f010 items=0 ppid=3477 pid=3483 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667384.279:4250900): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650033392E3135352E3136362E3334002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=CRYPTO_KEY_USER msg=audit(1674667441.056:4250901): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=3663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667441.056:4250902): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=3663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667441.056:4250903): pid=3663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=3663 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674667441.558:4250904): pid=3670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667441.558:4250905): pid=3670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667441.558:4250906): pid=3670 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258226 res=1
type=USER_START msg=audit(1674667441.574:4250907): pid=3670 uid=0 auid=1055 ses=258226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667441.576:4250908): pid=3670 uid=0 auid=1055 ses=258226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667441.835:4250909): avc: denied { read append } for pid=3668 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674667441.835:4250909): avc: denied { open } for pid=3668 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667441.835:4250909): arch=c000003e syscall=2 success=yes exit=8 a0=563572784a60 a1=402 a2=7fffa18cbf00 a3=7fffa18cb9a0 items=0 ppid=5547 pid=3668 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667441.835:4250909): proctitle="dovecot/imap"
type=AVC msg=audit(1674667441.835:4250910): avc: denied { getattr } for pid=3668 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667441.835:4250910): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fffa18cbe60 a2=7fffa18cbe60 a3=7fffa18cb8e0 items=0 ppid=5547 pid=3668 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667441.835:4250910): proctitle="dovecot/imap"
type=AVC msg=audit(1674667441.835:4250911): avc: denied { write } for pid=3668 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667441.835:4250911): arch=c000003e syscall=2 success=yes exit=10 a0=563572789990 a1=2 a2=7fffa18cbc00 a3=7fffa18cb6a0 items=0 ppid=5547 pid=3668 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667441.835:4250911): proctitle="dovecot/imap"
type=AVC msg=audit(1674667441.836:4250912): avc: denied { lock } for pid=3668 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667441.836:4250912): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffa18cbb00 a3=63d165b1 items=0 ppid=5547 pid=3668 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667441.836:4250912): proctitle="dovecot/imap"
type=AVC msg=audit(1674667441.836:4250913): avc: denied { read } for pid=3668 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674667441.836:4250913): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5635727b22f8 a2=90800 a3=0 items=0 ppid=5547 pid=3668 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667441.836:4250913): proctitle="dovecot/imap"
type=AVC msg=audit(1674667441.837:4250914): avc: denied { getattr } for pid=3668 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667441.837:4250914): arch=c000003e syscall=4 success=yes exit=0 a0=563572774a60 a1=7fffa18cbeb0 a2=7fffa18cbeb0 a3=6f632e6f72676173 items=0 ppid=5547 pid=3668 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667441.837:4250914): proctitle="dovecot/imap"
type=CRED_DISP msg=audit(1674667441.890:4250915): pid=3670 uid=0 auid=1055 ses=258226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667441.892:4250916): pid=3670 uid=0 auid=1055 ses=258226 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667445.164:4250917): avc: denied { write } for pid=3700 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674667445.164:4250917): arch=c000003e syscall=21 success=yes exit=0 a0=559d8392e4c0 a1=2 a2=7b48 a3=7ffd9245e9a0 items=0 ppid=5547 pid=3700 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667445.164:4250917): proctitle="dovecot/imap"
type=AVC msg=audit(1674667484.103:4250918): avc: denied { name_connect } for pid=3187 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667484.103:4250918): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe2a306840 a2=10 a3=7ffe2a30683c items=0 ppid=5547 pid=3187 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667484.103:4250918): proctitle="dovecot/auth"
type=AVC msg=audit(1674667484.114:4250919): avc: denied { write } for pid=3193 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667484.114:4250919): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5c463300 a2=6e a3=63d165dc items=0 ppid=5547 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667484.114:4250919): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674667501.912:4250920): pid=3985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674667501.912:4250921): pid=3986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667501.912:4250922): pid=3985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667501.914:4250923): pid=3986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667501.915:4250924): pid=3985 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258227 res=1
type=LOGIN msg=audit(1674667501.915:4250925): pid=3986 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258228 res=1
type=USER_START msg=audit(1674667501.989:4250926): pid=3986 uid=0 auid=1055 ses=258228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674667501.994:4250927): pid=3985 uid=0 auid=0 ses=258227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667501.995:4250928): pid=3986 uid=0 auid=1055 ses=258228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667501.999:4250929): pid=3985 uid=0 auid=0 ses=258227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667502.339:4250930): pid=3986 uid=0 auid=1055 ses=258228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667502.342:4250931): pid=3986 uid=0 auid=1055 ses=258228 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667505.376:4250932): pid=3985 uid=0 auid=0 ses=258227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667505.378:4250933): pid=3985 uid=0 auid=0 ses=258227 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667524.019:4250934): avc: denied { name_connect } for pid=3187 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667524.019:4250934): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffe2a306840 a2=10 a3=7ffe2a30683c items=0 ppid=5547 pid=3187 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667524.019:4250934): proctitle="dovecot/auth"
type=AVC msg=audit(1674667524.029:4250935): avc: denied { write } for pid=3193 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667524.029:4250935): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5c463300 a2=6e a3=63d16604 items=0 ppid=5547 pid=3193 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667524.029:4250935): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674667561.398:4250936): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667561.398:4250937): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667561.399:4250938): pid=4187 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258229 res=1
type=USER_START msg=audit(1674667561.418:4250939): pid=4187 uid=0 auid=1055 ses=258229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667561.420:4250940): pid=4187 uid=0 auid=1055 ses=258229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667561.718:4250941): pid=4187 uid=0 auid=1055 ses=258229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667561.721:4250942): pid=4187 uid=0 auid=1055 ses=258229 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674667599.046:4250943): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674667599.046:4250943): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b4cea8e1010 items=0 ppid=4313 pid=4318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667599.046:4250943): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E3231332E3132382E313232002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674667606.960:4250944): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674667606.960:4250944): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aae864c3010 items=0 ppid=4341 pid=4346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667606.960:4250944): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131362E3133322E35302E313636002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674667621.353:4250945): avc: denied { read append } for pid=4400 comm="lmtp" name="maildirsize" dev="vda1" ino=320594718 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674667621.353:4250945): avc: denied { open } for pid=4400 comm="lmtp" path="/home/wwwresourcehunte/mail/maildirsize" dev="vda1" ino=320594718 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.353:4250945): arch=c000003e syscall=2 success=yes exit=17 a0=564ea303da50 a1=402 a2=7ffccd8a2a40 a3=fffff800 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.353:4250945): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.355:4250946): avc: denied { getattr } for pid=4400 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.log" dev="vda1" ino=320594709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.355:4250946): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffccd8a38c0 a2=7ffccd8a38c0 a3=7ffccd8a3320 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.355:4250946): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.355:4250947): avc: denied { write } for pid=4400 comm="lmtp" name="dovecot.index" dev="vda1" ino=320594715 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.355:4250947): arch=c000003e syscall=2 success=yes exit=18 a0=564ea307bc20 a1=2 a2=7ffccd8a3660 a3=7ffccd8a3120 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.355:4250947): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.356:4250948): avc: denied { read write } for pid=4400 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674667621.356:4250948): avc: denied { open } for pid=4400 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.356:4250948): arch=c000003e syscall=2 success=yes exit=19 a0=564ea30711e0 a1=2 a2=7ffccd8a38e0 a3=7ffccd8a35a0 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.356:4250948): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.356:4250949): avc: denied { getattr } for pid=4400 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.356:4250949): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffccd8a3a40 a2=7ffccd8a3a40 a3=7ffccd8a3420 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.356:4250949): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.359:4250950): avc: denied { write } for pid=4400 comm="lmtp" name="tmp" dev="vda1" ino=58914102 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674667621.359:4250950): avc: denied { add_name } for pid=4400 comm="lmtp" name="1674667621.M355299P4400.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674667621.359:4250950): avc: denied { create } for pid=4400 comm="lmtp" name="1674667621.M355299P4400.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.359:4250950): arch=c000003e syscall=2 success=yes exit=21 a0=564ea2fd3228 a1=2c1 a2=1ff a3=7ffccd8a34e0 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.359:4250950): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.361:4250951): avc: denied { lock } for pid=4400 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.log" dev="vda1" ino=320594709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.361:4250951): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffccd8a34f0 a3=63d16665 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.361:4250951): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.362:4250952): avc: denied { remove_name } for pid=4400 comm="lmtp" name="1674667621.M355299P4400.host.nexidigital.com" dev="vda1" ino=62201774 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674667621.362:4250952): avc: denied { rename } for pid=4400 comm="lmtp" name="1674667621.M355299P4400.host.nexidigital.com" dev="vda1" ino=62201774 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.362:4250952): arch=c000003e syscall=82 success=yes exit=0 a0=564ea2fd25b8 a1=564ea2fd2608 a2=69d0 a3=7ffccd8a34a0 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.362:4250952): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.362:4250953): avc: denied { read } for pid=4400 comm="lmtp" name="new" dev="vda1" ino=58914101 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674667621.362:4250953): arch=c000003e syscall=2 success=yes exit=21 a0=564ea3090420 a1=0 a2=0 a3=7ffccd8a34a0 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.362:4250953): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.365:4250954): avc: denied { lock } for pid=4400 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.cache" dev="vda1" ino=320202326 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.365:4250954): arch=c000003e syscall=72 success=yes exit=0 a0=16 a1=7 a2=7ffccd8a3810 a3=63d16665 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.365:4250954): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.365:4250955): avc: denied { unlink } for pid=4400 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=320614361 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.365:4250955): arch=c000003e syscall=87 success=yes exit=0 a0=564ea3095d50 a1=7fa1db7cd071 a2=2f9 a3=4 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.365:4250955): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.365:4250956): avc: denied { append } for pid=4400 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=320200839 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.365:4250956): arch=c000003e syscall=2 success=yes exit=21 a0=564ea308fa60 a1=402 a2=7ffccd8a3970 a3=4 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.365:4250956): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.366:4250957): avc: denied { link } for pid=4400 comm="lmtp" name=".temp.host.nexidigital.com.4400.7a19644b2939e5b4" dev="vda1" ino=320614361 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.366:4250957): arch=c000003e syscall=86 success=yes exit=0 a0=564ea2fd38f8 a1=564ea2fd3868 a2=1 a3=63d16665 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.366:4250957): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674667621.366:4250958): avc: denied { setattr } for pid=4400 comm="lmtp" name=".temp.host.nexidigital.com.4400.7a19644b2939e5b4" dev="vda1" ino=320614361 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667621.366:4250958): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=426 a3=36 items=0 ppid=5547 pid=4400 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667621.366:4250958): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674667621.741:4250959): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667621.741:4250960): pid=4406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667621.742:4250961): pid=4406 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258230 res=1
type=USER_START msg=audit(1674667621.759:4250962): pid=4406 uid=0 auid=1055 ses=258230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667621.759:4250963): pid=4406 uid=0 auid=1055 ses=258230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667622.042:4250964): pid=4406 uid=0 auid=1055 ses=258230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667622.045:4250965): pid=4406 uid=0 auid=1055 ses=258230 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674667646.947:4250966): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667646.948:4250967): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667646.948:4250968): pid=4504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674667647.152:4250969): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=4504 suid=74 rport=60122 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.197.24 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674667647.153:4250970): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=4504 suid=74 rport=60122 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.197.24 terminal=? res=success'
type=USER_AUTH msg=audit(1674667648.336:4250971): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.126.197.24 addr=59.126.197.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667650.270:4250972): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.197.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667650.927:4250973): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.126.197.24 addr=59.126.197.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667653.137:4250974): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.197.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667653.736:4250975): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.126.197.24 addr=59.126.197.24 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674667656.358:4250976): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.197.24 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674667656.692:4250977): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4504 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667656.692:4250978): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4504 suid=74 rport=60122 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.197.24 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667656.693:4250979): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667656.693:4250980): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674667656.693:4250981): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4498 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674667656.694:4250982): pid=4498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.197.24 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674667659.985:4250983): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674667659.985:4250983): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa5c59af010 items=0 ppid=4551 pid=4554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667659.985:4250983): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674667659.990:4250984): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674667659.990:4250984): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f44a49e9010 items=0 ppid=4551 pid=4555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667659.990:4250984): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674667659.996:4250985): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674667659.996:4250985): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efc30645010 items=0 ppid=4551 pid=4556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667659.996:4250985): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674667660.001:4250986): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674667660.001:4250986): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc9a5058010 items=0 ppid=4551 pid=4557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667660.001:4250986): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674667660.315:4250987): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674667660.315:4250987): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7faf9218a010 items=0 ppid=4551 pid=4566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667660.315:4250987): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131352E37372E3138372E313934002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667660.321:4250988): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674667660.321:4250988): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9a8d8ab010 items=0 ppid=4551 pid=4567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667660.321:4250988): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131352E37372E3138372E313934002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674667660.326:4250989): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674667660.326:4250989): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc9c3689010 items=0 ppid=4551 pid=4568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667660.326:4250989): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035392E3132362E3139372E3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674667660.332:4250990): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674667660.332:4250990): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1947575010 items=0 ppid=4551 pid=4569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667660.332:4250990): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035392E3132362E3139372E3234002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674667681.062:4250991): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674667681.062:4250992): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667681.062:4250994): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667681.062:4250993): pid=4639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667681.062:4250996): pid=4640 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258231 res=1
type=LOGIN msg=audit(1674667681.062:4250995): pid=4639 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258232 res=1
type=USER_START msg=audit(1674667681.093:4250997): pid=4640 uid=0 auid=1055 ses=258231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674667681.095:4250998): pid=4639 uid=0 auid=0 ses=258232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667681.095:4250999): pid=4640 uid=0 auid=1055 ses=258231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667681.096:4251000): pid=4639 uid=0 auid=0 ses=258232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667681.142:4251001): pid=4639 uid=0 auid=0 ses=258232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667681.145:4251002): pid=4639 uid=0 auid=0 ses=258232 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667681.420:4251003): pid=4640 uid=0 auid=1055 ses=258231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667681.422:4251004): pid=4640 uid=0 auid=1055 ses=258231 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667708.536:4251005): avc: denied { name_connect } for pid=3187 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667708.536:4251005): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe2a306840 a2=10 a3=7ffe2a30683c items=0 ppid=5547 pid=3187 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667708.536:4251005): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674667709.624:4251006): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674667709.624:4251006): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b838bfdc010 items=0 ppid=4754 pid=4759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667709.624:4251006): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132352E33342E3234302E3239002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674667735.634:4251007): avc: denied { write } for pid=4830 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667735.634:4251007): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc31f40190 a2=6e a3=63d166d7 items=0 ppid=5547 pid=4830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667735.634:4251007): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674667741.441:4251008): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667741.441:4251009): pid=4845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667741.443:4251010): pid=4845 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258233 res=1
type=USER_START msg=audit(1674667741.461:4251011): pid=4845 uid=0 auid=1055 ses=258233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667741.462:4251012): pid=4845 uid=0 auid=1055 ses=258233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667741.822:4251013): pid=4845 uid=0 auid=1055 ses=258233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667741.824:4251014): pid=4845 uid=0 auid=1055 ses=258233 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674667801.853:4251015): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667801.853:4251016): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667801.853:4251017): pid=5039 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258234 res=1
type=USER_ACCT msg=audit(1674667801.853:4251018): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667801.853:4251019): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667801.853:4251020): pid=5040 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258235 res=1
type=USER_ACCT msg=audit(1674667801.857:4251021): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667801.858:4251022): pid=5041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667801.858:4251023): pid=5041 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258236 res=1
type=USER_START msg=audit(1674667802.005:4251024): pid=5040 uid=0 auid=0 ses=258235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674667802.005:4251025): pid=5041 uid=0 auid=1055 ses=258236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674667802.021:4251026): pid=5039 uid=0 auid=0 ses=258234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667802.042:4251027): pid=5041 uid=0 auid=1055 ses=258236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667802.056:4251028): pid=5040 uid=0 auid=0 ses=258235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667802.056:4251029): pid=5039 uid=0 auid=0 ses=258234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667802.102:4251030): pid=5039 uid=0 auid=0 ses=258234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667802.108:4251031): pid=5039 uid=0 auid=0 ses=258234 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667802.420:4251032): pid=5041 uid=0 auid=1055 ses=258236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667802.425:4251033): pid=5041 uid=0 auid=1055 ses=258236 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667805.469:4251034): pid=5040 uid=0 auid=0 ses=258235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667805.471:4251035): pid=5040 uid=0 auid=0 ses=258235 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667811.810:4251036): avc: denied { read } for pid=5111 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674667811.810:4251036): avc: denied { open } for pid=5111 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667811.810:4251036): arch=c000003e syscall=2 success=yes exit=18 a0=5617c04d7f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=5111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667811.810:4251036): proctitle="dovecot/auth"
type=AVC msg=audit(1674667811.810:4251037): avc: denied { getattr } for pid=5111 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674667811.810:4251037): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe1c833d20 a2=7ffe1c833d20 a3=fffffc00 items=0 ppid=5547 pid=5111 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667811.810:4251037): proctitle="dovecot/auth"
type=AVC msg=audit(1674667812.356:4251038): avc: denied { name_connect } for pid=5111 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667812.356:4251038): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe1c833b10 a2=10 a3=7ffe1c833b0c items=0 ppid=5547 pid=5111 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667812.356:4251038): proctitle="dovecot/auth"
type=AVC msg=audit(1674667812.386:4251039): avc: denied { write } for pid=5142 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667812.386:4251039): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd843b2af0 a2=6e a3=63d16724 items=0 ppid=5547 pid=5142 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667812.386:4251039): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674667861.492:4251040): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667861.492:4251041): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667861.494:4251042): pid=5376 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258237 res=1
type=USER_START msg=audit(1674667861.517:4251043): pid=5376 uid=0 auid=1055 ses=258237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667861.520:4251044): pid=5376 uid=0 auid=1055 ses=258237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667861.875:4251045): pid=5376 uid=0 auid=1055 ses=258237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667861.877:4251046): pid=5376 uid=0 auid=1055 ses=258237 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674667921.890:4251047): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667921.890:4251048): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667921.890:4251049): pid=5571 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258238 res=1
type=USER_START msg=audit(1674667921.902:4251050): pid=5571 uid=0 auid=1055 ses=258238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667921.904:4251051): pid=5571 uid=0 auid=1055 ses=258238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667922.150:4251052): pid=5571 uid=0 auid=1055 ses=258238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667922.151:4251053): pid=5571 uid=0 auid=1055 ses=258238 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667925.250:4251054): avc: denied { name_connect } for pid=5111 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674667925.250:4251054): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe1c833b10 a2=10 a3=7ffe1c833b0c items=0 ppid=5547 pid=5111 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667925.250:4251054): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674667926.333:4251055): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674667926.333:4251055): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b0b65425010 items=0 ppid=5593 pid=5598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667926.333:4251055): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3137382E36352E32002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431373A
type=NETFILTER_CFG msg=audit(1674667951.064:4251056): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674667951.064:4251056): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af20f01f010 items=0 ppid=5693 pid=5700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667951.064:4251056): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E32372E3132382E323131002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674667981.164:4251057): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674667981.165:4251058): pid=5782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674667981.165:4251059): pid=5782 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258239 res=1
type=USER_START msg=audit(1674667981.178:4251060): pid=5782 uid=0 auid=1055 ses=258239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674667981.179:4251061): pid=5782 uid=0 auid=1055 ses=258239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674667981.422:4251062): pid=5782 uid=0 auid=1055 ses=258239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674667981.424:4251063): pid=5782 uid=0 auid=1055 ses=258239 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674667983.899:4251064): avc: denied { write } for pid=5804 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674667983.899:4251064): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe128a8a10 a2=6e a3=63d167cf items=0 ppid=5547 pid=5804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674667983.899:4251064): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674668041.440:4251065): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668041.441:4251066): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668041.441:4251067): pid=5999 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258240 res=1
type=USER_START msg=audit(1674668041.452:4251068): pid=5999 uid=0 auid=1055 ses=258240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668041.453:4251069): pid=5999 uid=0 auid=1055 ses=258240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668041.805:4251070): pid=5999 uid=0 auid=1055 ses=258240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668041.806:4251071): pid=5999 uid=0 auid=1055 ses=258240 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668065.578:4251072): avc: denied { read } for pid=6090 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674668065.578:4251072): avc: denied { open } for pid=6090 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668065.578:4251072): arch=c000003e syscall=2 success=yes exit=18 a0=559006b21f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=6090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668065.578:4251072): proctitle="dovecot/auth"
type=AVC msg=audit(1674668065.578:4251073): avc: denied { getattr } for pid=6090 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668065.578:4251073): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcf33ff870 a2=7ffcf33ff870 a3=fffffc00 items=0 ppid=5547 pid=6090 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668065.578:4251073): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674668101.821:4251074): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668101.821:4251075): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668101.821:4251076): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668101.821:4251077): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668101.821:4251078): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668101.821:4251079): pid=6191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668101.821:4251080): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668101.821:4251081): pid=6193 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258241 res=1
type=CRED_ACQ msg=audit(1674668101.821:4251082): pid=6190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668101.821:4251083): pid=6191 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258242 res=1
type=LOGIN msg=audit(1674668101.821:4251084): pid=6192 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258243 res=1
type=LOGIN msg=audit(1674668101.821:4251085): pid=6190 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258244 res=1
type=USER_START msg=audit(1674668101.876:4251086): pid=6193 uid=0 auid=1055 ses=258241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674668101.876:4251087): pid=6192 uid=0 auid=0 ses=258243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674668101.876:4251088): pid=6191 uid=0 auid=0 ses=258242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668101.877:4251089): pid=6193 uid=0 auid=1055 ses=258241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674668101.878:4251090): pid=6190 uid=0 auid=0 ses=258244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668101.878:4251091): pid=6192 uid=0 auid=0 ses=258243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668101.878:4251092): pid=6191 uid=0 auid=0 ses=258242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668101.879:4251093): pid=6190 uid=0 auid=0 ses=258244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668101.970:4251094): pid=6191 uid=0 auid=0 ses=258242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668101.978:4251095): pid=6191 uid=0 auid=0 ses=258242 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668102.027:4251096): pid=6192 uid=0 auid=0 ses=258243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668102.029:4251097): pid=6192 uid=0 auid=0 ses=258243 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668102.234:4251098): pid=6193 uid=0 auid=1055 ses=258241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668102.235:4251099): pid=6193 uid=0 auid=1055 ses=258241 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668105.256:4251100): pid=6190 uid=0 auid=0 ses=258244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668105.258:4251101): pid=6190 uid=0 auid=0 ses=258244 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668150.407:4251102): avc: denied { read } for pid=6413 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674668150.407:4251102): avc: denied { open } for pid=6413 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668150.407:4251102): arch=c000003e syscall=2 success=yes exit=18 a0=55574a0fcf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668150.407:4251102): proctitle="dovecot/auth"
type=AVC msg=audit(1674668150.408:4251103): avc: denied { getattr } for pid=6413 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668150.408:4251103): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe046ea0a0 a2=7ffe046ea0a0 a3=fffffc00 items=0 ppid=5547 pid=6413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668150.408:4251103): proctitle="dovecot/auth"
type=AVC msg=audit(1674668150.910:4251104): avc: denied { name_connect } for pid=6413 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674668150.910:4251104): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe046e9e90 a2=10 a3=7ffe046e9e8c items=0 ppid=5547 pid=6413 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668150.910:4251104): proctitle="dovecot/auth"
type=AVC msg=audit(1674668150.941:4251105): avc: denied { write } for pid=6441 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674668150.941:4251105): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdfd9a6e70 a2=6e a3=63d16876 items=0 ppid=5547 pid=6441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668150.941:4251105): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674668161.280:4251106): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668161.281:4251107): pid=6522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668161.282:4251108): pid=6522 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258245 res=1
type=USER_START msg=audit(1674668161.299:4251109): pid=6522 uid=0 auid=1055 ses=258245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668161.301:4251110): pid=6522 uid=0 auid=1055 ses=258245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668161.548:4251111): pid=6522 uid=0 auid=1055 ses=258245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668161.551:4251112): pid=6522 uid=0 auid=1055 ses=258245 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668221.569:4251113): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668221.570:4251114): pid=6708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668221.570:4251115): pid=6708 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258246 res=1
type=USER_START msg=audit(1674668221.584:4251116): pid=6708 uid=0 auid=1055 ses=258246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668221.585:4251117): pid=6708 uid=0 auid=1055 ses=258246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668221.841:4251118): pid=6708 uid=0 auid=1055 ses=258246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668221.844:4251119): pid=6708 uid=0 auid=1055 ses=258246 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668269.149:4251120): avc: denied { write } for pid=6869 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674668269.149:4251120): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffb5c6db30 a2=6e a3=63d168ed items=0 ppid=5547 pid=6869 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668269.149:4251120): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674668279.304:4251121): avc: denied { name_connect } for pid=6413 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674668279.304:4251121): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe046e9e90 a2=10 a3=7ffe046e9e8c items=0 ppid=5547 pid=6413 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668279.304:4251121): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674668281.858:4251122): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668281.858:4251123): pid=6913 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668281.858:4251124): pid=6913 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258247 res=1
type=USER_START msg=audit(1674668281.873:4251125): pid=6913 uid=0 auid=1055 ses=258247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668281.875:4251126): pid=6913 uid=0 auid=1055 ses=258247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668282.136:4251127): pid=6913 uid=0 auid=1055 ses=258247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668282.139:4251128): pid=6913 uid=0 auid=1055 ses=258247 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674668284.094:4251129): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674668284.094:4251129): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab0142cc010 items=0 ppid=6929 pid=6934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668284.094:4251129): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E37352E31332E313832002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674668341.150:4251130): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668341.150:4251131): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668341.151:4251132): pid=7109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668341.151:4251133): pid=7110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668341.151:4251134): pid=7109 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258248 res=1
type=LOGIN msg=audit(1674668341.151:4251135): pid=7110 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258249 res=1
type=USER_START msg=audit(1674668341.183:4251136): pid=7110 uid=0 auid=1055 ses=258249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674668341.184:4251137): pid=7109 uid=0 auid=0 ses=258248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668341.185:4251138): pid=7110 uid=0 auid=1055 ses=258249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668341.185:4251139): pid=7109 uid=0 auid=0 ses=258248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668341.502:4251140): pid=7110 uid=0 auid=1055 ses=258249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668341.504:4251141): pid=7110 uid=0 auid=1055 ses=258249 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668342.505:4251142): pid=7109 uid=0 auid=0 ses=258248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668342.507:4251143): pid=7109 uid=0 auid=0 ses=258248 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668401.525:4251145): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668401.525:4251144): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668401.525:4251146): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668401.525:4251147): pid=7329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668401.525:4251148): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668401.526:4251149): pid=7327 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668401.527:4251150): pid=7328 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258250 res=1
type=LOGIN msg=audit(1674668401.527:4251151): pid=7329 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258251 res=1
type=LOGIN msg=audit(1674668401.527:4251152): pid=7327 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258252 res=1
type=USER_START msg=audit(1674668401.594:4251153): pid=7329 uid=0 auid=1055 ses=258251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674668401.594:4251154): pid=7328 uid=0 auid=0 ses=258250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668401.596:4251155): pid=7328 uid=0 auid=0 ses=258250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668401.598:4251156): pid=7329 uid=0 auid=1055 ses=258251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674668401.598:4251157): pid=7327 uid=0 auid=0 ses=258252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668401.598:4251158): pid=7327 uid=0 auid=0 ses=258252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668401.636:4251159): pid=7327 uid=0 auid=0 ses=258252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668401.640:4251160): pid=7327 uid=0 auid=0 ses=258252 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668401.651:4251161): avc: denied { read } for pid=7337 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674668401.651:4251161): avc: denied { open } for pid=7337 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668401.651:4251161): arch=c000003e syscall=2 success=yes exit=18 a0=56261d4ddf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=7337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668401.651:4251161): proctitle="dovecot/auth"
type=AVC msg=audit(1674668401.651:4251162): avc: denied { getattr } for pid=7337 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668401.651:4251162): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd85b72870 a2=7ffd85b72870 a3=fffffc00 items=0 ppid=5547 pid=7337 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668401.651:4251162): proctitle="dovecot/auth"
type=CRED_DISP msg=audit(1674668402.072:4251163): pid=7329 uid=0 auid=1055 ses=258251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668402.084:4251164): pid=7329 uid=0 auid=1055 ses=258251 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668404.531:4251165): avc: denied { name_connect } for pid=7337 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674668404.531:4251165): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd85b72660 a2=10 a3=7ffd85b7265c items=0 ppid=5547 pid=7337 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668404.531:4251165): proctitle="dovecot/auth"
type=AVC msg=audit(1674668404.567:4251166): avc: denied { write } for pid=7361 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674668404.567:4251166): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff0921cc10 a2=6e a3=63d16974 items=0 ppid=5547 pid=7361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668404.567:4251166): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674668405.018:4251167): pid=7328 uid=0 auid=0 ses=258250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668405.021:4251168): pid=7328 uid=0 auid=0 ses=258250 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668412.768:4251169): avc: denied { read append } for pid=7386 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674668412.768:4251169): avc: denied { open } for pid=7386 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668412.768:4251169): arch=c000003e syscall=2 success=yes exit=8 a0=5638bae8ca60 a1=402 a2=7ffc4f7cc190 a3=7ffc4f7cbc20 items=0 ppid=5547 pid=7386 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668412.768:4251169): proctitle="dovecot/imap"
type=AVC msg=audit(1674668412.769:4251170): avc: denied { getattr } for pid=7386 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668412.769:4251170): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc4f7cc0f0 a2=7ffc4f7cc0f0 a3=7ffc4f7cbb60 items=0 ppid=5547 pid=7386 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668412.769:4251170): proctitle="dovecot/imap"
type=AVC msg=audit(1674668412.769:4251171): avc: denied { write } for pid=7386 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668412.769:4251171): arch=c000003e syscall=2 success=yes exit=10 a0=5638bae91960 a1=2 a2=7ffc4f7cbe90 a3=7ffc4f7cb920 items=0 ppid=5547 pid=7386 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668412.769:4251171): proctitle="dovecot/imap"
type=AVC msg=audit(1674668412.769:4251172): avc: denied { lock } for pid=7386 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668412.769:4251172): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc4f7cbd90 a3=63d1697c items=0 ppid=5547 pid=7386 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668412.769:4251172): proctitle="dovecot/imap"
type=AVC msg=audit(1674668412.769:4251173): avc: denied { read } for pid=7386 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674668412.769:4251173): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5638baeba2f8 a2=90800 a3=0 items=0 ppid=5547 pid=7386 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668412.769:4251173): proctitle="dovecot/imap"
type=AVC msg=audit(1674668412.770:4251174): avc: denied { getattr } for pid=7386 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668412.770:4251174): arch=c000003e syscall=4 success=yes exit=0 a0=5638bae7ca60 a1=7ffc4f7cc140 a2=7ffc4f7cc140 a3=6f632e6f72676173 items=0 ppid=5547 pid=7386 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668412.770:4251174): proctitle="dovecot/imap"
type=AVC msg=audit(1674668414.495:4251175): avc: denied { write } for pid=7393 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674668414.495:4251175): arch=c000003e syscall=21 success=yes exit=0 a0=5609d18cf4c0 a1=2 a2=7b48 a3=7ffc2bdae9a0 items=0 ppid=5547 pid=7393 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668414.495:4251175): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674668461.043:4251176): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668461.043:4251177): pid=7562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668461.045:4251178): pid=7562 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258253 res=1
type=USER_START msg=audit(1674668461.066:4251179): pid=7562 uid=0 auid=1055 ses=258253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668461.067:4251180): pid=7562 uid=0 auid=1055 ses=258253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668461.321:4251181): pid=7562 uid=0 auid=1055 ses=258253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668461.322:4251182): pid=7562 uid=0 auid=1055 ses=258253 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668521.334:4251183): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668521.335:4251184): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668521.335:4251185): pid=7750 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258254 res=1
type=USER_START msg=audit(1674668521.347:4251186): pid=7750 uid=0 auid=1055 ses=258254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668521.348:4251187): pid=7750 uid=0 auid=1055 ses=258254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668521.586:4251188): pid=7750 uid=0 auid=1055 ses=258254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668521.588:4251189): pid=7750 uid=0 auid=1055 ses=258254 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668530.995:4251190): avc: denied { write } for pid=7832 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674668530.995:4251190): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcd7557940 a2=6e a3=63d169f2 items=0 ppid=5547 pid=7832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668530.995:4251190): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674668545.065:4251191): avc: denied { name_connect } for pid=7337 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674668545.065:4251191): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd85b72660 a2=10 a3=7ffd85b7265c items=0 ppid=5547 pid=7337 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668545.065:4251191): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674668546.150:4251192): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674668546.150:4251192): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2baa89dcd010 items=0 ppid=7952 pid=7957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668546.150:4251192): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003137312E3231322E3130332E323435002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=NETFILTER_CFG msg=audit(1674668561.282:4251193): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674668561.282:4251193): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b68f3a3a010 items=0 ppid=8014 pid=8019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668561.282:4251193): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E37362E3130342E3132002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674668581.608:4251194): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668581.608:4251195): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668581.608:4251196): pid=8082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668581.608:4251197): pid=8081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668581.608:4251198): pid=8082 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258255 res=1
type=LOGIN msg=audit(1674668581.608:4251199): pid=8081 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258256 res=1
type=USER_START msg=audit(1674668581.640:4251200): pid=8082 uid=0 auid=1055 ses=258255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674668581.640:4251201): pid=8081 uid=0 auid=0 ses=258256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668581.642:4251202): pid=8082 uid=0 auid=1055 ses=258255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668581.642:4251203): pid=8081 uid=0 auid=0 ses=258256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668581.689:4251204): pid=8081 uid=0 auid=0 ses=258256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668581.691:4251205): pid=8081 uid=0 auid=0 ses=258256 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668581.962:4251206): pid=8082 uid=0 auid=1055 ses=258255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668581.964:4251207): pid=8082 uid=0 auid=1055 ses=258255 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668641.984:4251208): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668641.984:4251209): pid=8281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668641.984:4251210): pid=8281 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258257 res=1
type=USER_START msg=audit(1674668642.007:4251211): pid=8281 uid=0 auid=1055 ses=258257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668642.011:4251212): pid=8281 uid=0 auid=1055 ses=258257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668642.306:4251213): pid=8281 uid=0 auid=1055 ses=258257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668642.309:4251214): pid=8281 uid=0 auid=1055 ses=258257 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674668658.666:4251215): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=8340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674668658.666:4251216): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=8340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674668658.667:4251217): pid=8340 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8340 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674668658.939:4251218): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=8340 suid=74 rport=52962 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674668658.940:4251219): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=8340 suid=74 rport=52962 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674668659.771:4251220): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674668662.502:4251221): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674668662.858:4251222): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8340 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674668662.858:4251223): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=8340 suid=74 rport=52962 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674668662.860:4251224): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=8338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674668662.860:4251225): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=8338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674668662.860:4251226): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=8338 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674668662.860:4251227): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674668701.324:4251228): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668701.324:4251229): pid=8484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668701.324:4251230): pid=8484 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258258 res=1
type=USER_ACCT msg=audit(1674668701.330:4251231): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668701.330:4251232): pid=8483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668701.330:4251233): pid=8483 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258259 res=1
type=USER_START msg=audit(1674668701.362:4251234): pid=8484 uid=0 auid=1055 ses=258258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668701.363:4251235): pid=8484 uid=0 auid=1055 ses=258258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674668701.363:4251236): pid=8483 uid=0 auid=0 ses=258259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668701.364:4251237): pid=8483 uid=0 auid=0 ses=258259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668701.702:4251238): pid=8484 uid=0 auid=1055 ses=258258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668701.706:4251239): pid=8484 uid=0 auid=1055 ses=258258 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668704.692:4251240): pid=8483 uid=0 auid=0 ses=258259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668704.695:4251241): pid=8483 uid=0 auid=0 ses=258259 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668751.664:4251242): avc: denied { read } for pid=8697 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674668751.664:4251242): avc: denied { open } for pid=8697 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.664:4251242): arch=c000003e syscall=2 success=yes exit=18 a0=55d41cc3ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=8697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.664:4251242): proctitle="dovecot/auth"
type=AVC msg=audit(1674668751.664:4251243): avc: denied { getattr } for pid=8697 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.664:4251243): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc59682460 a2=7ffc59682460 a3=fffffc00 items=0 ppid=5547 pid=8697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.664:4251243): proctitle="dovecot/auth"
type=AVC msg=audit(1674668751.682:4251244): avc: denied { write } for pid=8698 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674668751.682:4251244): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc5f0f9d40 a2=6e a3=63d16acf items=0 ppid=5547 pid=8698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.682:4251244): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674668751.704:4251245): avc: denied { read append } for pid=8696 comm="lmtp" name="maildirsize" dev="vda1" ino=320594718 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674668751.704:4251245): avc: denied { open } for pid=8696 comm="lmtp" path="/home/wwwresourcehunte/mail/maildirsize" dev="vda1" ino=320594718 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.704:4251245): arch=c000003e syscall=2 success=yes exit=17 a0=5633a054aa50 a1=402 a2=7fffaca8f0c0 a3=fffff800 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.704:4251245): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.706:4251246): avc: denied { getattr } for pid=8696 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.log" dev="vda1" ino=320594709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.706:4251246): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7fffaca8ff40 a2=7fffaca8ff40 a3=7fffaca8f9a0 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.706:4251246): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.707:4251247): avc: denied { write } for pid=8696 comm="lmtp" name="dovecot.index" dev="vda1" ino=320594715 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.707:4251247): arch=c000003e syscall=2 success=yes exit=18 a0=5633a0588c20 a1=2 a2=7fffaca8fce0 a3=7fffaca8f7a0 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.707:4251247): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.707:4251248): avc: denied { read write } for pid=8696 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674668751.707:4251248): avc: denied { open } for pid=8696 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.707:4251248): arch=c000003e syscall=2 success=yes exit=19 a0=5633a057e1e0 a1=2 a2=7fffaca8ff60 a3=7fffaca8fc20 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.707:4251248): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.707:4251249): avc: denied { getattr } for pid=8696 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.707:4251249): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7fffaca900c0 a2=7fffaca900c0 a3=7fffaca8faa0 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.707:4251249): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.711:4251250): avc: denied { write } for pid=8696 comm="lmtp" name="tmp" dev="vda1" ino=58914102 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674668751.711:4251250): avc: denied { add_name } for pid=8696 comm="lmtp" name="1674668751.M707892P8696.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674668751.711:4251250): avc: denied { create } for pid=8696 comm="lmtp" name="1674668751.M707892P8696.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.711:4251250): arch=c000003e syscall=2 success=yes exit=21 a0=5633a04e0228 a1=2c1 a2=1ff a3=7fffaca8fb60 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.711:4251250): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.715:4251251): avc: denied { lock } for pid=8696 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.log" dev="vda1" ino=320594709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.715:4251251): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7fffaca8fb70 a3=63d16acf items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.715:4251251): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.716:4251252): avc: denied { remove_name } for pid=8696 comm="lmtp" name="1674668751.M707892P8696.host.nexidigital.com" dev="vda1" ino=62201778 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674668751.716:4251252): avc: denied { rename } for pid=8696 comm="lmtp" name="1674668751.M707892P8696.host.nexidigital.com" dev="vda1" ino=62201778 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.716:4251252): arch=c000003e syscall=82 success=yes exit=0 a0=5633a04df5b8 a1=5633a04df608 a2=69d0 a3=7fffaca8fb20 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.716:4251252): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.716:4251253): avc: denied { read } for pid=8696 comm="lmtp" name="new" dev="vda1" ino=58914101 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674668751.716:4251253): arch=c000003e syscall=2 success=yes exit=21 a0=5633a059d420 a1=0 a2=0 a3=7fffaca8fb20 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.716:4251253): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.721:4251254): avc: denied { lock } for pid=8696 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.cache" dev="vda1" ino=320202326 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.721:4251254): arch=c000003e syscall=72 success=yes exit=0 a0=16 a1=7 a2=7fffaca8fe90 a3=63d16acf items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.721:4251254): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.721:4251255): avc: denied { unlink } for pid=8696 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=320614327 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.721:4251255): arch=c000003e syscall=87 success=yes exit=0 a0=5633a05a2d50 a1=7f649194b071 a2=2f9 a3=4 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.721:4251255): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.721:4251256): avc: denied { append } for pid=8696 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=320200839 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.721:4251256): arch=c000003e syscall=2 success=yes exit=21 a0=5633a059ca60 a1=402 a2=7fffaca8fff0 a3=4 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.721:4251256): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.722:4251257): avc: denied { link } for pid=8696 comm="lmtp" name=".temp.host.nexidigital.com.8696.d8520525134de604" dev="vda1" ino=320614327 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.722:4251257): arch=c000003e syscall=86 success=yes exit=0 a0=5633a04e0900 a1=5633a04e0870 a2=1 a3=63d16acf items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.722:4251257): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674668751.722:4251258): avc: denied { setattr } for pid=8696 comm="lmtp" name=".temp.host.nexidigital.com.8696.d8520525134de604" dev="vda1" ino=320614327 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674668751.722:4251258): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=426 a3=36 items=0 ppid=5547 pid=8696 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668751.722:4251258): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674668761.714:4251259): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668761.714:4251260): pid=8757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668761.716:4251261): pid=8757 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258260 res=1
type=USER_START msg=audit(1674668761.741:4251262): pid=8757 uid=0 auid=1055 ses=258260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668761.743:4251263): pid=8757 uid=0 auid=1055 ses=258260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668762.096:4251264): pid=8757 uid=0 auid=1055 ses=258260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668762.098:4251265): pid=8757 uid=0 auid=1055 ses=258260 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668778.386:4251266): avc: denied { name_connect } for pid=8697 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674668778.386:4251266): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffc59682250 a2=10 a3=7ffc5968224c items=0 ppid=5547 pid=8697 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668778.386:4251266): proctitle="dovecot/auth"
type=AVC msg=audit(1674668778.399:4251267): avc: denied { write } for pid=8698 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674668778.399:4251267): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc5f0f9d30 a2=6e a3=63d16aea items=0 ppid=5547 pid=8698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668778.399:4251267): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674668793.952:4251268): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674668793.952:4251268): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae13dff5010 items=0 ppid=8932 pid=8937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668793.952:4251268): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3135382E3137312E3231002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674668813.097:4251269): avc: denied { name_connect } for pid=8697 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674668813.097:4251269): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffc59682250 a2=10 a3=7ffc5968224c items=0 ppid=5547 pid=8697 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668813.097:4251269): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674668814.186:4251270): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674668814.186:4251270): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2afc310c4010 items=0 ppid=8998 pid=9003 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668814.186:4251270): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131352E3233312E3235342E3338002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674668821.114:4251271): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668821.114:4251272): pid=9020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668821.114:4251273): pid=9020 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258261 res=1
type=USER_START msg=audit(1674668821.127:4251274): pid=9020 uid=0 auid=1055 ses=258261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668821.129:4251275): pid=9020 uid=0 auid=1055 ses=258261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668821.359:4251276): pid=9020 uid=0 auid=1055 ses=258261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668821.360:4251277): pid=9020 uid=0 auid=1055 ses=258261 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668881.380:4251278): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668881.380:4251279): pid=9309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668881.381:4251280): pid=9309 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258262 res=1
type=USER_START msg=audit(1674668881.394:4251281): pid=9309 uid=0 auid=1055 ses=258262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668881.396:4251282): pid=9309 uid=0 auid=1055 ses=258262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668881.640:4251283): pid=9309 uid=0 auid=1055 ses=258262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668881.643:4251284): pid=9309 uid=0 auid=1055 ses=258262 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674668941.657:4251285): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674668941.658:4251286): pid=9552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674668941.658:4251287): pid=9552 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258263 res=1
type=USER_START msg=audit(1674668941.670:4251288): pid=9552 uid=0 auid=1055 ses=258263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674668941.671:4251289): pid=9552 uid=0 auid=1055 ses=258263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674668941.961:4251290): pid=9552 uid=0 auid=1055 ses=258263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674668941.962:4251291): pid=9552 uid=0 auid=1055 ses=258263 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674668965.533:4251292): avc: denied { name_connect } for pid=8697 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674668965.533:4251292): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc59682250 a2=10 a3=7ffc5968224c items=0 ppid=5547 pid=8697 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668965.533:4251292): proctitle="dovecot/auth"
type=AVC msg=audit(1674668965.562:4251293): avc: denied { write } for pid=9656 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674668965.562:4251293): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc561a94a0 a2=6e a3=63d16ba5 items=0 ppid=5547 pid=9656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674668965.562:4251293): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674669001.978:4251294): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669001.978:4251295): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669001.978:4251296): pid=9765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669001.978:4251297): pid=9764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669001.978:4251298): pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669001.978:4251299): pid=9765 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258264 res=1
type=LOGIN msg=audit(1674669001.978:4251300): pid=9764 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258265 res=1
type=CRED_ACQ msg=audit(1674669001.978:4251301): pid=9766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669001.979:4251302): pid=9766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258266 res=1
type=USER_ACCT msg=audit(1674669001.980:4251303): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669001.980:4251304): pid=9767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669001.980:4251305): pid=9767 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258267 res=1
type=USER_START msg=audit(1674669002.053:4251306): pid=9764 uid=0 auid=0 ses=258265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669002.054:4251307): pid=9766 uid=0 auid=0 ses=258266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669002.062:4251308): pid=9765 uid=0 auid=0 ses=258264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669002.064:4251309): pid=9767 uid=0 auid=1055 ses=258267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669002.064:4251310): pid=9764 uid=0 auid=0 ses=258265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669002.064:4251311): pid=9765 uid=0 auid=0 ses=258264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669002.065:4251312): pid=9766 uid=0 auid=0 ses=258266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669002.068:4251313): pid=9767 uid=0 auid=1055 ses=258267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669002.104:4251314): pid=9764 uid=0 auid=0 ses=258265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669002.107:4251315): pid=9764 uid=0 auid=0 ses=258265 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669002.178:4251316): pid=9766 uid=0 auid=0 ses=258266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669002.182:4251317): pid=9766 uid=0 auid=0 ses=258266 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669002.428:4251318): pid=9767 uid=0 auid=1055 ses=258267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669002.430:4251319): pid=9767 uid=0 auid=1055 ses=258267 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669005.413:4251320): pid=9765 uid=0 auid=0 ses=258264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669005.416:4251321): pid=9765 uid=0 auid=0 ses=258264 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669061.435:4251322): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669061.435:4251323): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669061.437:4251324): pid=9991 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258268 res=1
type=USER_START msg=audit(1674669061.456:4251325): pid=9991 uid=0 auid=1055 ses=258268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669061.457:4251326): pid=9991 uid=0 auid=1055 ses=258268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669061.696:4251327): pid=9991 uid=0 auid=1055 ses=258268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669061.700:4251328): pid=9991 uid=0 auid=1055 ses=258268 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669121.716:4251329): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669121.716:4251330): pid=10214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669121.716:4251331): pid=10214 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258269 res=1
type=USER_START msg=audit(1674669121.733:4251332): pid=10214 uid=0 auid=1055 ses=258269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669121.735:4251333): pid=10214 uid=0 auid=1055 ses=258269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669122.031:4251334): pid=10214 uid=0 auid=1055 ses=258269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669122.033:4251335): pid=10214 uid=0 auid=1055 ses=258269 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674669124.283:4251336): avc: denied { read } for pid=10234 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674669124.283:4251336): avc: denied { open } for pid=10234 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669124.283:4251336): arch=c000003e syscall=2 success=yes exit=18 a0=5575f77d1f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=10234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669124.283:4251336): proctitle="dovecot/auth"
type=AVC msg=audit(1674669124.284:4251337): avc: denied { getattr } for pid=10234 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669124.284:4251337): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffea75e9850 a2=7ffea75e9850 a3=fffffc00 items=0 ppid=5547 pid=10234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669124.284:4251337): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674669181.045:4251338): pid=10418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669181.046:4251339): pid=10418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669181.046:4251340): pid=10418 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258270 res=1
type=USER_START msg=audit(1674669181.057:4251341): pid=10418 uid=0 auid=1055 ses=258270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669181.058:4251342): pid=10418 uid=0 auid=1055 ses=258270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669181.296:4251343): pid=10418 uid=0 auid=1055 ses=258270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669181.298:4251344): pid=10418 uid=0 auid=1055 ses=258270 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674669219.495:4251345): avc: denied { name_connect } for pid=10234 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674669219.495:4251345): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffea75e9640 a2=10 a3=7ffea75e963c items=0 ppid=5547 pid=10234 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669219.495:4251345): proctitle="dovecot/auth"
type=AVC msg=audit(1674669219.524:4251346): avc: denied { write } for pid=10590 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674669219.524:4251346): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdc50b3d70 a2=6e a3=63d16ca3 items=0 ppid=5547 pid=10590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669219.524:4251346): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674669241.317:4251347): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669241.317:4251348): pid=10723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669241.317:4251349): pid=10723 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258271 res=1
type=USER_START msg=audit(1674669241.330:4251350): pid=10723 uid=0 auid=1055 ses=258271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669241.332:4251351): pid=10723 uid=0 auid=1055 ses=258271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669241.571:4251352): pid=10723 uid=0 auid=1055 ses=258271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669241.573:4251353): pid=10723 uid=0 auid=1055 ses=258271 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674669265.123:4251354): avc: denied { name_connect } for pid=10234 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674669265.123:4251354): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffea75e9640 a2=10 a3=7ffea75e963c items=0 ppid=5547 pid=10234 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669265.123:4251354): proctitle="dovecot/auth"
type=AVC msg=audit(1674669265.135:4251355): avc: denied { write } for pid=10590 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674669265.135:4251355): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdc50b3d70 a2=6e a3=63d16cd1 items=0 ppid=5547 pid=10590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669265.135:4251355): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674669286.451:4251356): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674669286.451:4251356): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae7d6d6e010 items=0 ppid=10886 pid=10891 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669286.451:4251356): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E3231362E3133382E313134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674669297.250:4251357): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669297.250:4251358): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669297.250:4251359): pid=10924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674669297.493:4251360): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=10924 suid=74 rport=39814 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674669297.493:4251361): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=10924 suid=74 rport=39814 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=? res=success'
type=USER_AUTH msg=audit(1674669298.383:4251362): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="lp" exe="/usr/sbin/sshd" hostname=104.244.74.6 addr=104.244.74.6 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674669300.503:4251363): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674669300.831:4251364): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10924 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669300.831:4251365): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10924 suid=74 rport=39814 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669300.833:4251366): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669300.833:4251367): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669300.833:4251368): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10923 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674669300.833:4251369): pid=10923 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674669301.588:4251370): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669301.588:4251371): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669301.588:4251372): pid=10940 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669301.588:4251373): pid=10941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669301.589:4251374): pid=10941 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258272 res=1
type=LOGIN msg=audit(1674669301.589:4251375): pid=10940 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258273 res=1
type=USER_START msg=audit(1674669301.626:4251376): pid=10940 uid=0 auid=0 ses=258273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669301.626:4251377): pid=10941 uid=0 auid=1055 ses=258272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669301.628:4251378): pid=10941 uid=0 auid=1055 ses=258272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669301.629:4251379): pid=10940 uid=0 auid=0 ses=258273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669301.970:4251380): pid=10941 uid=0 auid=1055 ses=258272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669301.973:4251381): pid=10941 uid=0 auid=1055 ses=258272 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669305.014:4251382): pid=10940 uid=0 auid=0 ses=258273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669305.016:4251383): pid=10940 uid=0 auid=0 ses=258273 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674669320.133:4251384): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674669320.133:4251384): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2afe5b518010 items=0 ppid=11010 pid=11016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669320.133:4251384): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E35382E34332E323338002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543137
type=AVC msg=audit(1674669326.859:4251385): avc: denied { write } for pid=11058 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674669326.859:4251385): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc305d0090 a2=6e a3=63d16d0e items=0 ppid=5547 pid=11058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669326.859:4251385): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674669329.731:4251386): avc: denied { read append } for pid=11070 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674669329.731:4251386): avc: denied { open } for pid=11070 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669329.731:4251386): arch=c000003e syscall=2 success=yes exit=8 a0=55a8ff2eda60 a1=402 a2=7ffe59970b90 a3=7ffe59970620 items=0 ppid=5547 pid=11070 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669329.731:4251386): proctitle="dovecot/imap"
type=AVC msg=audit(1674669329.732:4251387): avc: denied { getattr } for pid=11070 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669329.732:4251387): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe59970af0 a2=7ffe59970af0 a3=7ffe59970560 items=0 ppid=5547 pid=11070 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669329.732:4251387): proctitle="dovecot/imap"
type=AVC msg=audit(1674669329.732:4251388): avc: denied { write } for pid=11070 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669329.732:4251388): arch=c000003e syscall=2 success=yes exit=10 a0=55a8ff2f2990 a1=2 a2=7ffe59970890 a3=7ffe59970320 items=0 ppid=5547 pid=11070 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669329.732:4251388): proctitle="dovecot/imap"
type=AVC msg=audit(1674669329.732:4251389): avc: denied { lock } for pid=11070 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669329.732:4251389): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe59970790 a3=63d16d11 items=0 ppid=5547 pid=11070 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669329.732:4251389): proctitle="dovecot/imap"
type=AVC msg=audit(1674669329.732:4251390): avc: denied { read } for pid=11070 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674669329.732:4251390): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55a8ff31b300 a2=90800 a3=0 items=0 ppid=5547 pid=11070 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669329.732:4251390): proctitle="dovecot/imap"
type=AVC msg=audit(1674669329.732:4251391): avc: denied { getattr } for pid=11070 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669329.732:4251391): arch=c000003e syscall=4 success=yes exit=0 a0=55a8ff2dda60 a1=7ffe59970b40 a2=7ffe59970b40 a3=6f632e6f72676173 items=0 ppid=5547 pid=11070 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669329.732:4251391): proctitle="dovecot/imap"
type=AVC msg=audit(1674669331.793:4251392): avc: denied { write } for pid=11078 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674669331.793:4251392): arch=c000003e syscall=21 success=yes exit=0 a0=565063c5b4c0 a1=2 a2=7b48 a3=7ffe44d3baa0 items=0 ppid=5547 pid=11078 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669331.793:4251392): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674669361.036:4251393): pid=11170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669361.036:4251394): pid=11170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669361.037:4251395): pid=11170 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258274 res=1
type=USER_START msg=audit(1674669361.053:4251396): pid=11170 uid=0 auid=1055 ses=258274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669361.056:4251397): pid=11170 uid=0 auid=1055 ses=258274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669361.312:4251398): pid=11170 uid=0 auid=1055 ses=258274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669361.314:4251399): pid=11170 uid=0 auid=1055 ses=258274 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674669395.089:4251400): avc: denied { name_connect } for pid=10234 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674669395.089:4251400): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffea75e9640 a2=10 a3=7ffea75e963c items=0 ppid=5547 pid=10234 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669395.089:4251400): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674669421.333:4251401): pid=11364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669421.333:4251402): pid=11364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669421.335:4251403): pid=11364 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258275 res=1
type=USER_START msg=audit(1674669421.352:4251404): pid=11364 uid=0 auid=1055 ses=258275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669421.353:4251405): pid=11364 uid=0 auid=1055 ses=258275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669421.632:4251406): pid=11364 uid=0 auid=1055 ses=258275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669421.634:4251407): pid=11364 uid=0 auid=1055 ses=258275 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669481.648:4251408): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669481.648:4251409): pid=11552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669481.648:4251410): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669481.648:4251411): pid=11552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669481.648:4251413): pid=11551 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258276 res=1
type=LOGIN msg=audit(1674669481.648:4251412): pid=11552 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258277 res=1
type=USER_START msg=audit(1674669481.686:4251414): pid=11551 uid=0 auid=0 ses=258276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669481.687:4251415): pid=11552 uid=0 auid=1055 ses=258277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669481.687:4251416): pid=11551 uid=0 auid=0 ses=258276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669481.688:4251417): pid=11552 uid=0 auid=1055 ses=258277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669481.744:4251418): pid=11551 uid=0 auid=0 ses=258276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669481.746:4251419): pid=11551 uid=0 auid=0 ses=258276 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669482.020:4251420): pid=11552 uid=0 auid=1055 ses=258277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669482.023:4251421): pid=11552 uid=0 auid=1055 ses=258277 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674669519.515:4251422): avc: denied { read } for pid=11699 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674669519.515:4251422): avc: denied { open } for pid=11699 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669519.515:4251422): arch=c000003e syscall=2 success=yes exit=18 a0=55c936043f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=11699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669519.515:4251422): proctitle="dovecot/auth"
type=AVC msg=audit(1674669519.515:4251423): avc: denied { getattr } for pid=11699 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669519.515:4251423): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd1c084a00 a2=7ffd1c084a00 a3=fffffc00 items=0 ppid=5547 pid=11699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669519.515:4251423): proctitle="dovecot/auth"
type=AVC msg=audit(1674669520.037:4251424): avc: denied { name_connect } for pid=11699 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674669520.037:4251424): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd1c0847f0 a2=10 a3=7ffd1c0847ec items=0 ppid=5547 pid=11699 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669520.037:4251424): proctitle="dovecot/auth"
type=AVC msg=audit(1674669520.068:4251425): avc: denied { write } for pid=11730 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674669520.068:4251425): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff201054e0 a2=6e a3=63d16dd0 items=0 ppid=5547 pid=11730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669520.068:4251425): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674669533.655:4251426): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669533.655:4251427): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669533.655:4251428): pid=11822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674669533.912:4251429): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=11822 suid=74 rport=53380 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674669533.912:4251430): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=11822 suid=74 rport=53380 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=? res=success'
type=USER_AUTH msg=audit(1674669534.753:4251431): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="lp" exe="/usr/sbin/sshd" hostname=104.244.74.6 addr=104.244.74.6 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674669536.243:4251432): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674669536.243:4251432): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd00255e010 items=0 ppid=11837 pid=11840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669536.243:4251432): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674669536.248:4251433): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674669536.248:4251433): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f37e68a9010 items=0 ppid=11837 pid=11841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669536.248:4251433): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674669536.252:4251434): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674669536.252:4251434): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc3105e9010 items=0 ppid=11837 pid=11842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669536.252:4251434): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674669536.255:4251435): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674669536.255:4251435): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2f3ac94010 items=0 ppid=11837 pid=11843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669536.255:4251435): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674669536.544:4251436): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674669536.544:4251436): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f54ba3a8010 items=0 ppid=11837 pid=11851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669536.544:4251436): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003137342E3133382E32352E323139002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674669536.550:4251437): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674669536.550:4251437): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f837134f010 items=0 ppid=11837 pid=11852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669536.550:4251437): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003137342E3133382E32352E323139002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674669536.555:4251438): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674669536.555:4251438): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc104df6010 items=0 ppid=11837 pid=11853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669536.555:4251438): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130342E3234342E37342E36002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674669536.560:4251439): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674669536.560:4251439): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f94dc124010 items=0 ppid=11837 pid=11854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669536.560:4251439): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130342E3234342E37342E36002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674669536.938:4251440): pid=11821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=104.244.74.6 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674669541.039:4251441): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669541.039:4251442): pid=11877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669541.040:4251443): pid=11877 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258278 res=1
type=USER_START msg=audit(1674669541.058:4251444): pid=11877 uid=0 auid=1055 ses=258278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669541.060:4251445): pid=11877 uid=0 auid=1055 ses=258278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669541.314:4251446): pid=11877 uid=0 auid=1055 ses=258278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669541.317:4251447): pid=11877 uid=0 auid=1055 ses=258278 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674669593.266:4251448): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674669593.266:4251448): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae27b9b6010 items=0 ppid=12056 pid=12062 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669593.266:4251448): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130362E31332E33362E323133002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674669600.679:4251449): avc: denied { write } for pid=12087 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674669600.679:4251449): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe9b535b50 a2=6e a3=63d16e20 items=0 ppid=5547 pid=12087 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669600.679:4251449): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674669601.332:4251451): pid=12093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669601.332:4251452): pid=12094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669601.332:4251450): pid=12091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669601.332:4251453): pid=12092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669601.332:4251454): pid=12093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669601.332:4251455): pid=12091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669601.333:4251456): pid=12094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669601.333:4251457): pid=12092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669601.333:4251458): pid=12093 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258279 res=1
type=LOGIN msg=audit(1674669601.333:4251459): pid=12091 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258280 res=1
type=LOGIN msg=audit(1674669601.333:4251460): pid=12094 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258281 res=1
type=LOGIN msg=audit(1674669601.333:4251461): pid=12092 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258282 res=1
type=USER_START msg=audit(1674669601.385:4251462): pid=12092 uid=0 auid=0 ses=258282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669601.386:4251463): pid=12091 uid=0 auid=0 ses=258280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669601.386:4251464): pid=12093 uid=0 auid=0 ses=258279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669601.386:4251465): pid=12094 uid=0 auid=1055 ses=258281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669601.388:4251466): pid=12093 uid=0 auid=0 ses=258279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669601.388:4251467): pid=12094 uid=0 auid=1055 ses=258281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669601.388:4251468): pid=12091 uid=0 auid=0 ses=258280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669601.388:4251469): pid=12092 uid=0 auid=0 ses=258282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669601.424:4251470): pid=12091 uid=0 auid=0 ses=258280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669601.429:4251471): pid=12091 uid=0 auid=0 ses=258280 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669601.513:4251472): pid=12092 uid=0 auid=0 ses=258282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669601.519:4251473): pid=12092 uid=0 auid=0 ses=258282 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669601.814:4251474): pid=12094 uid=0 auid=1055 ses=258281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669601.817:4251475): pid=12094 uid=0 auid=1055 ses=258281 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669604.795:4251476): pid=12093 uid=0 auid=0 ses=258279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669604.797:4251477): pid=12093 uid=0 auid=0 ses=258279 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669661.818:4251478): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669661.818:4251479): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669661.818:4251480): pid=12316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669661.818:4251481): pid=12315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669661.819:4251482): pid=12315 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258283 res=1
type=LOGIN msg=audit(1674669661.819:4251483): pid=12316 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258284 res=1
type=USER_START msg=audit(1674669661.865:4251484): pid=12316 uid=0 auid=1055 ses=258284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669661.866:4251485): pid=12316 uid=0 auid=1055 ses=258284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669661.866:4251486): pid=12315 uid=0 auid=0 ses=258283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669661.867:4251487): pid=12315 uid=0 auid=0 ses=258283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669661.898:4251488): pid=12315 uid=0 auid=0 ses=258283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669661.901:4251489): pid=12315 uid=0 auid=0 ses=258283 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669662.140:4251490): pid=12316 uid=0 auid=1055 ses=258284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669662.141:4251491): pid=12316 uid=0 auid=1055 ses=258284 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669721.156:4251492): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669721.157:4251493): pid=12548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669721.157:4251494): pid=12548 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258285 res=1
type=USER_START msg=audit(1674669721.172:4251495): pid=12548 uid=0 auid=1055 ses=258285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669721.175:4251496): pid=12548 uid=0 auid=1055 ses=258285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669721.447:4251497): pid=12548 uid=0 auid=1055 ses=258285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669721.449:4251498): pid=12548 uid=0 auid=1055 ses=258285 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674669736.057:4251499): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669736.057:4251500): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669736.057:4251501): pid=12606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674669736.626:4251502): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=12606 suid=74 rport=51687 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674669736.626:4251503): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=12606 suid=74 rport=51687 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=USER_AUTH msg=audit(1674669738.247:4251504): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674669740.100:4251505): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674669740.380:4251506): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12606 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669740.380:4251507): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12606 suid=74 rport=51687 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669740.381:4251508): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669740.381:4251509): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669740.381:4251510): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674669740.381:4251511): pid=12602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674669781.466:4251512): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669781.467:4251513): pid=12750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669781.468:4251514): pid=12750 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258286 res=1
type=USER_START msg=audit(1674669781.487:4251515): pid=12750 uid=0 auid=1055 ses=258286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669781.488:4251516): pid=12750 uid=0 auid=1055 ses=258286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669781.833:4251517): pid=12750 uid=0 auid=1055 ses=258286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669781.848:4251518): pid=12750 uid=0 auid=1055 ses=258286 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669841.862:4251519): pid=12947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669841.863:4251520): pid=12947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669841.863:4251521): pid=12947 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258287 res=1
type=USER_START msg=audit(1674669841.873:4251522): pid=12947 uid=0 auid=1055 ses=258287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669841.875:4251523): pid=12947 uid=0 auid=1055 ses=258287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669842.124:4251524): pid=12947 uid=0 auid=1055 ses=258287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669842.126:4251525): pid=12947 uid=0 auid=1055 ses=258287 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674669882.658:4251526): avc: denied { read } for pid=13101 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674669882.658:4251526): avc: denied { open } for pid=13101 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669882.658:4251526): arch=c000003e syscall=2 success=yes exit=18 a0=558a15fa4f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=13101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669882.658:4251526): proctitle="dovecot/auth"
type=AVC msg=audit(1674669882.658:4251527): avc: denied { getattr } for pid=13101 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674669882.658:4251527): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcbe4ad180 a2=7ffcbe4ad180 a3=fffffc00 items=0 ppid=5547 pid=13101 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669882.658:4251527): proctitle="dovecot/auth"
type=AVC msg=audit(1674669883.195:4251528): avc: denied { name_connect } for pid=13101 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674669883.195:4251528): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcbe4acf70 a2=10 a3=7ffcbe4acf6c items=0 ppid=5547 pid=13101 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669883.195:4251528): proctitle="dovecot/auth"
type=AVC msg=audit(1674669883.229:4251529): avc: denied { write } for pid=13133 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674669883.229:4251529): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdc72352c0 a2=6e a3=63d16f3b items=0 ppid=5547 pid=13133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669883.229:4251529): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674669888.639:4251530): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669888.639:4251531): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669888.639:4251532): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674669888.818:4251533): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=13204 suid=74 rport=43452 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674669888.818:4251534): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=13204 suid=74 rport=43452 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674669889.822:4251535): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674669891.741:4251536): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674669894.923:4251537): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674669897.529:4251538): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674669900.711:4251539): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674669901.144:4251540): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669901.144:4251541): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674669901.144:4251542): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669901.144:4251544): pid=13257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669901.144:4251543): pid=13256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669901.144:4251545): pid=13255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669901.145:4251546): pid=13257 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258288 res=1
type=LOGIN msg=audit(1674669901.145:4251547): pid=13256 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258289 res=1
type=LOGIN msg=audit(1674669901.145:4251548): pid=13255 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258290 res=1
type=USER_START msg=audit(1674669901.187:4251549): pid=13256 uid=0 auid=0 ses=258289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669901.187:4251550): pid=13255 uid=0 auid=0 ses=258290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674669901.188:4251551): pid=13257 uid=0 auid=1055 ses=258288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669901.191:4251553): pid=13256 uid=0 auid=0 ses=258289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669901.191:4251552): pid=13255 uid=0 auid=0 ses=258290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669901.191:4251554): pid=13257 uid=0 auid=1055 ses=258288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669901.299:4251555): pid=13256 uid=0 auid=0 ses=258289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669901.303:4251556): pid=13256 uid=0 auid=0 ses=258289 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669901.515:4251557): pid=13257 uid=0 auid=1055 ses=258288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669901.518:4251558): pid=13257 uid=0 auid=1055 ses=258288 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674669902.807:4251559): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674669904.558:4251560): pid=13255 uid=0 auid=0 ses=258290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669904.559:4251561): pid=13255 uid=0 auid=0 ses=258290 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674669905.989:4251562): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13204 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669905.989:4251563): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13204 suid=74 rport=43452 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669905.991:4251564): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669905.991:4251565): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674669905.991:4251566): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674669905.991:4251567): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=AVC msg=audit(1674669907.858:4251568): avc: denied { name_connect } for pid=13101 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674669907.858:4251568): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffcbe4acf70 a2=10 a3=7ffcbe4acf6c items=0 ppid=5547 pid=13101 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669907.858:4251568): proctitle="dovecot/auth"
type=AVC msg=audit(1674669907.868:4251569): avc: denied { write } for pid=13133 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674669907.868:4251569): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdc72352c0 a2=6e a3=63d16f53 items=0 ppid=5547 pid=13133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669907.868:4251569): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674669915.754:4251570): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674669915.754:4251570): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2e1db76010 items=0 ppid=13318 pid=13323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674669915.754:4251570): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130312E3233302E3131362E313934002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674669961.579:4251571): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674669961.580:4251572): pid=13490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674669961.580:4251573): pid=13490 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258291 res=1
type=USER_START msg=audit(1674669961.598:4251574): pid=13490 uid=0 auid=1055 ses=258291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674669961.601:4251575): pid=13490 uid=0 auid=1055 ses=258291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674669961.884:4251576): pid=13490 uid=0 auid=1055 ses=258291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674669961.887:4251577): pid=13490 uid=0 auid=1055 ses=258291 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670021.902:4251578): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670021.903:4251579): pid=13730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670021.903:4251580): pid=13730 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258292 res=1
type=USER_START msg=audit(1674670021.922:4251581): pid=13730 uid=0 auid=1055 ses=258292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670021.923:4251582): pid=13730 uid=0 auid=1055 ses=258292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670022.212:4251583): pid=13730 uid=0 auid=1055 ses=258292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670022.213:4251584): pid=13730 uid=0 auid=1055 ses=258292 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670081.228:4251585): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670081.229:4251586): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670081.229:4251587): pid=13906 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258293 res=1
type=USER_START msg=audit(1674670081.243:4251588): pid=13906 uid=0 auid=1055 ses=258293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670081.245:4251589): pid=13906 uid=0 auid=1055 ses=258293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670081.580:4251590): pid=13906 uid=0 auid=1055 ses=258293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670081.582:4251591): pid=13906 uid=0 auid=1055 ses=258293 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670141.593:4251592): pid=14102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670141.593:4251593): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670141.593:4251594): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670141.593:4251595): pid=14102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670141.593:4251596): pid=14101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258294 res=1
type=LOGIN msg=audit(1674670141.593:4251597): pid=14102 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258295 res=1
type=USER_START msg=audit(1674670141.617:4251598): pid=14102 uid=0 auid=1055 ses=258295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670141.618:4251599): pid=14101 uid=0 auid=0 ses=258294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670141.618:4251600): pid=14102 uid=0 auid=1055 ses=258295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670141.619:4251601): pid=14101 uid=0 auid=0 ses=258294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670141.841:4251602): pid=14102 uid=0 auid=1055 ses=258295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670141.843:4251603): pid=14102 uid=0 auid=1055 ses=258295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670142.793:4251604): pid=14101 uid=0 auid=0 ses=258294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670142.796:4251605): pid=14101 uid=0 auid=0 ses=258294 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670198.973:4251606): avc: denied { read } for pid=14306 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674670198.973:4251606): avc: denied { open } for pid=14306 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670198.973:4251606): arch=c000003e syscall=2 success=yes exit=18 a0=560c988a3f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=14306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670198.973:4251606): proctitle="dovecot/auth"
type=AVC msg=audit(1674670198.973:4251607): avc: denied { getattr } for pid=14306 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670198.973:4251607): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffa5f5c6f0 a2=7fffa5f5c6f0 a3=fffffc00 items=0 ppid=5547 pid=14306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670198.973:4251607): proctitle="dovecot/auth"
type=AVC msg=audit(1674670199.478:4251608): avc: denied { name_connect } for pid=14306 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674670199.478:4251608): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fffa5f5c4e0 a2=10 a3=7fffa5f5c4dc items=0 ppid=5547 pid=14306 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670199.478:4251608): proctitle="dovecot/auth"
type=AVC msg=audit(1674670199.507:4251609): avc: denied { write } for pid=14335 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674670199.507:4251609): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff61843c90 a2=6e a3=63d17077 items=0 ppid=5547 pid=14335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670199.507:4251609): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674670201.832:4251610): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670201.832:4251611): pid=14359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670201.832:4251612): pid=14358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670201.832:4251613): pid=14359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670201.832:4251614): pid=14360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670201.832:4251615): pid=14360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670201.833:4251616): pid=14359 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258296 res=1
type=LOGIN msg=audit(1674670201.833:4251617): pid=14358 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258297 res=1
type=LOGIN msg=audit(1674670201.841:4251618): pid=14360 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258298 res=1
type=USER_START msg=audit(1674670201.940:4251619): pid=14359 uid=0 auid=0 ses=258296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670201.943:4251620): pid=14359 uid=0 auid=0 ses=258296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670201.943:4251621): pid=14360 uid=0 auid=1055 ses=258298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670201.950:4251622): pid=14358 uid=0 auid=0 ses=258297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670201.951:4251623): pid=14358 uid=0 auid=0 ses=258297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670201.956:4251624): pid=14360 uid=0 auid=1055 ses=258298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670202.001:4251625): pid=14358 uid=0 auid=0 ses=258297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670202.005:4251626): pid=14358 uid=0 auid=0 ses=258297 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670202.044:4251627): avc: denied { write } for pid=14335 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674670202.044:4251627): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff61843c90 a2=6e a3=63d1707a items=0 ppid=5547 pid=14335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670202.044:4251627): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674670202.333:4251628): pid=14360 uid=0 auid=1055 ses=258298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670202.336:4251629): pid=14360 uid=0 auid=1055 ses=258298 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670205.326:4251630): pid=14359 uid=0 auid=0 ses=258296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670205.330:4251631): pid=14359 uid=0 auid=0 ses=258296 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670234.523:4251632): avc: denied { name_connect } for pid=14306 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674670234.523:4251632): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7fffa5f5c4e0 a2=10 a3=7fffa5f5c4dc items=0 ppid=5547 pid=14306 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670234.523:4251632): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674670255.488:4251633): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674670255.488:4251633): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b1094a66010 items=0 ppid=14596 pid=14601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670255.488:4251633): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035392E34322E3132362E323130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674670261.352:4251634): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670261.352:4251635): pid=14615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670261.354:4251636): pid=14615 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258299 res=1
type=USER_START msg=audit(1674670261.372:4251637): pid=14615 uid=0 auid=1055 ses=258299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670261.374:4251638): pid=14615 uid=0 auid=1055 ses=258299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670261.671:4251639): pid=14615 uid=0 auid=1055 ses=258299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670261.673:4251640): pid=14615 uid=0 auid=1055 ses=258299 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674670286.782:4251641): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670286.782:4251642): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670286.782:4251643): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670286.854:4251644): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=14718 suid=74 rport=45795 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.172.182.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670286.854:4251645): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=14718 suid=74 rport=45795 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.172.182.158 terminal=? res=success'
type=USER_AUTH msg=audit(1674670287.264:4251646): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=113.172.182.158 addr=113.172.182.158 terminal=ssh res=failed'
type=AVC msg=audit(1674670288.729:4251647): avc: denied { read append } for pid=14722 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674670288.729:4251647): avc: denied { open } for pid=14722 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670288.729:4251647): arch=c000003e syscall=2 success=yes exit=8 a0=55a17b7aba60 a1=402 a2=7ffdb7881de0 a3=7ffdb7881860 items=0 ppid=5547 pid=14722 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670288.729:4251647): proctitle="dovecot/imap"
type=AVC msg=audit(1674670288.729:4251648): avc: denied { getattr } for pid=14722 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670288.729:4251648): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffdb7881d40 a2=7ffdb7881d40 a3=7ffdb78817a0 items=0 ppid=5547 pid=14722 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670288.729:4251648): proctitle="dovecot/imap"
type=AVC msg=audit(1674670288.729:4251649): avc: denied { write } for pid=14722 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670288.729:4251649): arch=c000003e syscall=2 success=yes exit=10 a0=55a17b7b0960 a1=2 a2=7ffdb7881ae0 a3=7ffdb78815a0 items=0 ppid=5547 pid=14722 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670288.729:4251649): proctitle="dovecot/imap"
type=AVC msg=audit(1674670288.730:4251650): avc: denied { lock } for pid=14722 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670288.730:4251650): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffdb78819e0 a3=63d170d0 items=0 ppid=5547 pid=14722 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670288.730:4251650): proctitle="dovecot/imap"
type=AVC msg=audit(1674670288.730:4251651): avc: denied { read } for pid=14722 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674670288.730:4251651): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55a17b7d9300 a2=90800 a3=0 items=0 ppid=5547 pid=14722 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670288.730:4251651): proctitle="dovecot/imap"
type=AVC msg=audit(1674670288.731:4251652): avc: denied { getattr } for pid=14722 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670288.731:4251652): arch=c000003e syscall=4 success=yes exit=0 a0=55a17b79ba60 a1=7ffdb7881d90 a2=7ffdb7881d90 a3=6f632e6f72676173 items=0 ppid=5547 pid=14722 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670288.731:4251652): proctitle="dovecot/imap"
type=USER_AUTH msg=audit(1674670289.820:4251653): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=113.172.182.158 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674670289.896:4251654): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14718 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670289.896:4251655): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14718 suid=74 rport=45795 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=113.172.182.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670289.897:4251656): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670289.897:4251657): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670289.897:4251658): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674670289.897:4251659): pid=14717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=113.172.182.158 terminal=ssh res=failed'
type=AVC msg=audit(1674670290.889:4251660): avc: denied { write } for pid=14729 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674670290.889:4251660): arch=c000003e syscall=21 success=yes exit=0 a0=555d967484c0 a1=2 a2=7b48 a3=7fff92026f20 items=0 ppid=5547 pid=14729 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670290.889:4251660): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674670307.119:4251661): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670307.120:4251662): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670307.120:4251663): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14788 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670307.120:4251664): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=14788 suid=74 rport=53464 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670307.121:4251665): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=14788 suid=74 rport=53464 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670308.677:4251666): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14788 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670308.677:4251667): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14788 suid=74 rport=53464 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670308.678:4251668): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670308.678:4251669): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670308.678:4251670): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14783 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674670308.678:4251671): pid=14783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674670309.468:4251672): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670309.468:4251673): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670309.468:4251674): pid=14796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670309.469:4251675): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=14796 suid=74 rport=53472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670309.469:4251676): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=14796 suid=74 rport=53472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670311.024:4251677): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14796 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670311.024:4251678): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14796 suid=74 rport=53472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670311.024:4251679): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670311.024:4251680): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670311.024:4251681): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674670311.025:4251682): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674670311.965:4251683): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670311.965:4251684): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670311.965:4251685): pid=14807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14807 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670311.966:4251686): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=14807 suid=74 rport=53484 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670311.967:4251687): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=14807 suid=74 rport=53484 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670313.556:4251688): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14807 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670313.556:4251689): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14807 suid=74 rport=53484 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670313.557:4251690): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670313.557:4251691): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670313.557:4251692): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14805 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674670313.557:4251693): pid=14805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=192.155.90.118 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674670321.691:4251694): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670321.691:4251695): pid=14831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670321.691:4251696): pid=14831 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258300 res=1
type=USER_START msg=audit(1674670321.709:4251697): pid=14831 uid=0 auid=1055 ses=258300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670321.711:4251698): pid=14831 uid=0 auid=1055 ses=258300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670321.989:4251699): pid=14831 uid=0 auid=1055 ses=258300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670321.992:4251700): pid=14831 uid=0 auid=1055 ses=258300 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670382.007:4251702): pid=15016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670382.007:4251701): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670382.007:4251703): pid=15016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670382.007:4251704): pid=15015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670382.007:4251705): pid=15016 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258301 res=1
type=LOGIN msg=audit(1674670382.007:4251706): pid=15015 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258302 res=1
type=USER_START msg=audit(1674670382.040:4251707): pid=15015 uid=0 auid=0 ses=258302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670382.040:4251708): pid=15016 uid=0 auid=1055 ses=258301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670382.041:4251709): pid=15016 uid=0 auid=1055 ses=258301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670382.042:4251710): pid=15015 uid=0 auid=0 ses=258302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670382.103:4251711): pid=15015 uid=0 auid=0 ses=258302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670382.105:4251712): pid=15015 uid=0 auid=0 ses=258302 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670382.285:4251713): pid=15016 uid=0 auid=1055 ses=258301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670382.287:4251714): pid=15016 uid=0 auid=1055 ses=258301 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670415.141:4251715): avc: denied { read } for pid=15158 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674670415.141:4251715): avc: denied { open } for pid=15158 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670415.141:4251715): arch=c000003e syscall=2 success=yes exit=18 a0=560bf8166f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=15158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670415.141:4251715): proctitle="dovecot/auth"
type=AVC msg=audit(1674670415.142:4251716): avc: denied { getattr } for pid=15158 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670415.142:4251716): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff34eae900 a2=7fff34eae900 a3=fffffc00 items=0 ppid=5547 pid=15158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670415.142:4251716): proctitle="dovecot/auth"
type=AVC msg=audit(1674670417.866:4251717): avc: denied { name_connect } for pid=15158 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674670417.866:4251717): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff34eae6f0 a2=10 a3=7fff34eae6ec items=0 ppid=5547 pid=15158 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670417.866:4251717): proctitle="dovecot/auth"
type=AVC msg=audit(1674670417.894:4251718): avc: denied { write } for pid=15167 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674670417.894:4251718): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd00f1f090 a2=6e a3=63d17151 items=0 ppid=5547 pid=15167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670417.894:4251718): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674670427.602:4251719): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674670427.602:4251719): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b07eb4e4010 items=0 ppid=15196 pid=15201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670427.602:4251719): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231392E3134322E3130362E313037002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=CRYPTO_KEY_USER msg=audit(1674670439.125:4251720): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670439.125:4251721): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670439.125:4251722): pid=15249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670439.327:4251723): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15249 suid=74 rport=58198 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670439.328:4251724): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=15249 suid=74 rport=58198 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=? res=success'
type=USER_AUTH msg=audit(1674670440.278:4251725): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=81.200.212.13 addr=81.200.212.13 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674670441.304:4251726): pid=15265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670441.304:4251727): pid=15265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670441.305:4251728): pid=15265 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258303 res=1
type=USER_START msg=audit(1674670441.325:4251729): pid=15265 uid=0 auid=1055 ses=258303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670441.328:4251730): pid=15265 uid=0 auid=1055 ses=258303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670441.597:4251731): pid=15265 uid=0 auid=1055 ses=258303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670441.604:4251732): pid=15265 uid=0 auid=1055 ses=258303 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674670442.173:4251733): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674670442.379:4251734): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15249 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670442.379:4251735): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=15249 suid=74 rport=58198 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670442.382:4251736): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=15248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670442.382:4251737): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=15248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670442.382:4251738): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=15248 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674670442.382:4251739): pid=15248 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674670501.621:4251740): pid=15468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670501.621:4251741): pid=15465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670501.621:4251742): pid=15466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670501.621:4251743): pid=15468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670501.621:4251744): pid=15466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670501.621:4251745): pid=15465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670501.621:4251746): pid=15466 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258304 res=1
type=LOGIN msg=audit(1674670501.621:4251747): pid=15465 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258305 res=1
type=LOGIN msg=audit(1674670501.621:4251748): pid=15468 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258306 res=1
type=USER_ACCT msg=audit(1674670501.622:4251749): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670501.622:4251750): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670501.622:4251751): pid=15467 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258307 res=1
type=USER_START msg=audit(1674670501.744:4251752): pid=15468 uid=0 auid=1055 ses=258306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670501.744:4251753): pid=15467 uid=0 auid=0 ses=258307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670501.746:4251754): pid=15467 uid=0 auid=0 ses=258307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670501.747:4251755): pid=15465 uid=0 auid=0 ses=258305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670501.747:4251756): pid=15466 uid=0 auid=0 ses=258304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670501.748:4251757): pid=15468 uid=0 auid=1055 ses=258306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670501.748:4251758): pid=15466 uid=0 auid=0 ses=258304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670501.749:4251759): pid=15465 uid=0 auid=0 ses=258305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670501.881:4251760): pid=15465 uid=0 auid=0 ses=258305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670501.888:4251761): pid=15465 uid=0 auid=0 ses=258305 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670502.149:4251762): pid=15468 uid=0 auid=1055 ses=258306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670502.151:4251763): pid=15468 uid=0 auid=1055 ses=258306 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670505.144:4251764): pid=15466 uid=0 auid=0 ses=258304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670505.146:4251765): pid=15466 uid=0 auid=0 ses=258304 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670515.739:4251766): avc: denied { read } for pid=15555 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674670515.739:4251766): avc: denied { open } for pid=15555 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670515.739:4251766): arch=c000003e syscall=2 success=yes exit=18 a0=55c2c1ebcf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=15555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670515.739:4251766): proctitle="dovecot/auth"
type=AVC msg=audit(1674670515.740:4251767): avc: denied { getattr } for pid=15555 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670515.740:4251767): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffea2adb390 a2=7ffea2adb390 a3=fffffc00 items=0 ppid=5547 pid=15555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670515.740:4251767): proctitle="dovecot/auth"
type=AVC msg=audit(1674670515.766:4251768): avc: denied { write } for pid=15556 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674670515.766:4251768): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe48287220 a2=6e a3=63d171b3 items=0 ppid=5547 pid=15556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670515.766:4251768): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674670515.782:4251769): avc: denied { read append } for pid=15554 comm="quota-status" name="maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674670515.782:4251769): avc: denied { open } for pid=15554 comm="quota-status" path="/home/remysagr/mail/remysagro.com/sales/maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670515.782:4251769): arch=c000003e syscall=2 success=yes exit=16 a0=555cad25d280 a1=402 a2=7fff138e1e60 a3=7f8eeaccc1c0 items=0 ppid=5547 pid=15554 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="quota-status" exe="/usr/libexec/dovecot/quota-status" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670515.782:4251769): proctitle=646F7665636F742F71756F74612D737461747573002D7000706F7374666978
type=AVC msg=audit(1674670516.918:4251770): avc: denied { name_connect } for pid=15555 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674670516.918:4251770): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffea2adb180 a2=10 a3=7ffea2adb17c items=0 ppid=5547 pid=15555 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670516.918:4251770): proctitle="dovecot/auth"
type=CRED_DISP msg=audit(1674670550.312:4251771): pid=15467 uid=0 auid=0 ses=258307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670550.316:4251772): pid=15467 uid=0 auid=0 ses=258307 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670561.337:4251773): pid=15807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670561.337:4251774): pid=15807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670561.338:4251775): pid=15807 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258308 res=1
type=USER_START msg=audit(1674670561.355:4251776): pid=15807 uid=0 auid=1055 ses=258308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670561.357:4251777): pid=15807 uid=0 auid=1055 ses=258308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670561.686:4251778): pid=15807 uid=0 auid=1055 ses=258308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670561.687:4251779): pid=15807 uid=0 auid=1055 ses=258308 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670564.881:4251780): avc: denied { name_connect } for pid=15555 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674670564.881:4251780): arch=c000003e syscall=42 success=no exit=-115 a0=19 a1=7ffea2adb180 a2=10 a3=7ffea2adb17c items=0 ppid=5547 pid=15555 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670564.881:4251780): proctitle="dovecot/auth"
type=AVC msg=audit(1674670564.895:4251781): avc: denied { write } for pid=15556 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674670564.895:4251781): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe48287210 a2=6e a3=63d171e4 items=0 ppid=5547 pid=15556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670564.895:4251781): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674670580.918:4251782): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674670580.918:4251782): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2afe0d4bd010 items=0 ppid=15869 pid=15874 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670580.918:4251782): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3139302E39392E3632002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543138
type=AVC msg=audit(1674670605.842:4251783): avc: denied { read append } for pid=15966 comm="lmtp" name="maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674670605.842:4251783): avc: denied { open } for pid=15966 comm="lmtp" path="/home/wwwtestugo/mail/maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670605.842:4251783): arch=c000003e syscall=2 success=yes exit=17 a0=55f72153ea00 a1=402 a2=7ffd42f352b0 a3=fffff800 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670605.842:4251783): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670605.844:4251784): avc: denied { getattr } for pid=15966 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670605.844:4251784): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffd42f36130 a2=7ffd42f36130 a3=7ffd42f35ba0 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670605.844:4251784): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670605.844:4251785): avc: denied { write } for pid=15966 comm="lmtp" name="dovecot.index" dev="vda1" ino=47725134 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670605.844:4251785): arch=c000003e syscall=2 success=yes exit=18 a0=55f72157cbb0 a1=2 a2=7ffd42f35ed0 a3=7ffd42f35960 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670605.844:4251785): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670606.311:4251786): avc: denied { read write } for pid=15966 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674670606.311:4251786): avc: denied { open } for pid=15966 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670606.311:4251786): arch=c000003e syscall=2 success=yes exit=19 a0=55f721572290 a1=2 a2=7ffd42f36150 a3=7ffd42f35de0 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670606.311:4251786): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670606.312:4251787): avc: denied { getattr } for pid=15966 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670606.312:4251787): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffd42f362b0 a2=7ffd42f362b0 a3=7ffd42f35ca0 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670606.312:4251787): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670608.831:4251788): avc: denied { write } for pid=15966 comm="lmtp" name="tmp" dev="vda1" ino=134000050 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674670608.831:4251788): avc: denied { add_name } for pid=15966 comm="lmtp" name="1674670605.M845560P15966.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674670608.831:4251788): avc: denied { create } for pid=15966 comm="lmtp" name="1674670605.M845560P15966.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670608.831:4251788): arch=c000003e syscall=2 success=yes exit=21 a0=55f7214d3ca8 a1=2c1 a2=1ff a3=7ffd42f35d60 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670608.831:4251788): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670608.834:4251789): avc: denied { remove_name } for pid=15966 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=48866208 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674670608.834:4251789): avc: denied { unlink } for pid=15966 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=48866208 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670608.834:4251789): arch=c000003e syscall=87 success=yes exit=0 a0=55f7214d3438 a1=7f5edeea5071 a2=c3 a3=1 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670608.834:4251789): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670609.001:4251790): avc: denied { rename } for pid=15966 comm="lmtp" name="1674670605.M845560P15966.host.nexidigital.com" dev="vda1" ino=130847621 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670609.001:4251790): arch=c000003e syscall=82 success=yes exit=0 a0=55f7214d3548 a1=55f7214d3590 a2=6a50 a3=7ffd42f35ce0 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670609.001:4251790): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670609.003:4251791): avc: denied { read } for pid=15966 comm="lmtp" name="new" dev="vda1" ino=126223302 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674670609.003:4251791): arch=c000003e syscall=2 success=yes exit=21 a0=55f721581490 a1=0 a2=55f7214d3410 a3=7ffd42f35ce0 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670609.003:4251791): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670609.004:4251792): avc: denied { lock } for pid=15966 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670609.004:4251792): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffd42f360f0 a3=63d17211 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670609.004:4251792): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670609.042:4251793): avc: denied { append } for pid=15966 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=47780291 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670609.042:4251793): arch=c000003e syscall=2 success=yes exit=21 a0=55f721702210 a1=402 a2=7ffd42f361e0 a3=4 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670609.042:4251793): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670609.042:4251794): avc: denied { lock } for pid=15966 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.list.index.log" dev="vda1" ino=47780291 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670609.042:4251794): arch=c000003e syscall=72 success=yes exit=0 a0=15 a1=7 a2=7ffd42f35de0 a3=63d17211 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670609.042:4251794): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670609.211:4251795): avc: denied { link } for pid=15966 comm="lmtp" name=".temp.host.nexidigital.com.15966.40f91c10ecb4aa51" dev="vda1" ino=48866208 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670609.211:4251795): arch=c000003e syscall=86 success=yes exit=0 a0=55f7214d4370 a1=55f7214d42e0 a2=1 a3=ffffff00 items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670609.211:4251795): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674670609.211:4251796): avc: denied { setattr } for pid=15966 comm="lmtp" name=".temp.host.nexidigital.com.15966.40f91c10ecb4aa51" dev="vda1" ino=48866208 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670609.211:4251796): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=417 a3=3b items=0 ppid=5547 pid=15966 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670609.211:4251796): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674670621.709:4251797): pid=16013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670621.709:4251798): pid=16013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670621.710:4251799): pid=16013 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258309 res=1
type=USER_START msg=audit(1674670621.722:4251800): pid=16013 uid=0 auid=1055 ses=258309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670621.723:4251801): pid=16013 uid=0 auid=1055 ses=258309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670622.064:4251802): pid=16013 uid=0 auid=1055 ses=258309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670622.065:4251803): pid=16013 uid=0 auid=1055 ses=258309 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670681.078:4251804): pid=16203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670681.078:4251805): pid=16203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670681.078:4251806): pid=16203 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258310 res=1
type=USER_START msg=audit(1674670681.089:4251807): pid=16203 uid=0 auid=1055 ses=258310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670681.090:4251808): pid=16203 uid=0 auid=1055 ses=258310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670681.317:4251809): pid=16203 uid=0 auid=1055 ses=258310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670681.318:4251810): pid=16203 uid=0 auid=1055 ses=258310 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670741.332:4251811): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670741.333:4251812): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670741.333:4251813): pid=16384 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258311 res=1
type=USER_START msg=audit(1674670741.349:4251814): pid=16384 uid=0 auid=1055 ses=258311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670741.355:4251815): pid=16384 uid=0 auid=1055 ses=258311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670741.743:4251816): pid=16384 uid=0 auid=1055 ses=258311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670741.744:4251817): pid=16384 uid=0 auid=1055 ses=258311 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670749.342:4251818): avc: denied { read } for pid=16417 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674670749.342:4251818): avc: denied { open } for pid=16417 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670749.342:4251818): arch=c000003e syscall=2 success=yes exit=18 a0=56413975ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=16417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670749.342:4251818): proctitle="dovecot/auth"
type=AVC msg=audit(1674670749.342:4251819): avc: denied { getattr } for pid=16417 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674670749.342:4251819): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffce2fe6ea0 a2=7ffce2fe6ea0 a3=fffffc00 items=0 ppid=5547 pid=16417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670749.342:4251819): proctitle="dovecot/auth"
type=AVC msg=audit(1674670751.910:4251820): avc: denied { write } for pid=16428 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674670751.910:4251820): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffefab07540 a2=6e a3=63d1729f items=0 ppid=5547 pid=16428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670751.910:4251820): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674670762.053:4251821): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670762.054:4251822): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670762.054:4251823): pid=16457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670762.218:4251824): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=16457 suid=74 rport=53006 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670762.218:4251825): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=16457 suid=74 rport=53006 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=? res=success'
type=USER_AUTH msg=audit(1674670762.948:4251826): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=31.41.244.124 addr=31.41.244.124 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674670765.717:4251827): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674670765.886:4251828): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16457 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670765.886:4251829): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16457 suid=74 rport=53006 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670765.887:4251830): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670765.887:4251831): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670765.887:4251832): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16456 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674670765.887:4251833): pid=16456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.41.244.124 terminal=ssh res=failed'
type=AVC msg=audit(1674670766.831:4251834): avc: denied { name_connect } for pid=16417 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674670766.831:4251834): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffce2fe6c90 a2=10 a3=7ffce2fe6c8c items=0 ppid=5547 pid=16417 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670766.831:4251834): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674670801.763:4251835): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674670801.763:4251836): pid=16592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670801.763:4251837): pid=16594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670801.763:4251838): pid=16592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670801.763:4251839): pid=16594 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258312 res=1
type=LOGIN msg=audit(1674670801.763:4251840): pid=16592 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258313 res=1
type=USER_ACCT msg=audit(1674670801.779:4251841): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670801.779:4251842): pid=16591 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670801.780:4251843): pid=16591 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258314 res=1
type=USER_ACCT msg=audit(1674670801.786:4251844): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670801.787:4251845): pid=16593 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670801.787:4251846): pid=16593 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258315 res=1
type=USER_START msg=audit(1674670801.895:4251847): pid=16594 uid=0 auid=1055 ses=258312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670801.895:4251848): pid=16592 uid=0 auid=0 ses=258313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670801.897:4251849): pid=16591 uid=0 auid=0 ses=258314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674670801.898:4251850): pid=16593 uid=0 auid=0 ses=258315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670801.914:4251851): pid=16592 uid=0 auid=0 ses=258313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670801.915:4251852): pid=16594 uid=0 auid=1055 ses=258312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670801.915:4251853): pid=16593 uid=0 auid=0 ses=258315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670801.915:4251854): pid=16591 uid=0 auid=0 ses=258314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670802.012:4251855): pid=16591 uid=0 auid=0 ses=258314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670802.036:4251856): pid=16591 uid=0 auid=0 ses=258314 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670802.109:4251857): pid=16593 uid=0 auid=0 ses=258315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670802.118:4251858): pid=16593 uid=0 auid=0 ses=258315 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670802.330:4251859): pid=16594 uid=0 auid=1055 ses=258312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670802.333:4251860): pid=16594 uid=0 auid=1055 ses=258312 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674670804.421:4251861): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674670804.421:4251861): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b81840c1010 items=0 ppid=1588 pid=16629 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.421:4251861): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E3231342E36312E33342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A32353A3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.426:4251862): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674670804.426:4251862): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ae575699010 items=0 ppid=1588 pid=16630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.426:4251862): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131332E3231352E3232332E39372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A32393A3531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.429:4251863): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674670804.429:4251863): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b49233b1010 items=0 ppid=1588 pid=16631 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.429:4251863): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033362E372E38352E382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A34353A3437002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.437:4251864): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674670804.437:4251864): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b26dca23010 items=0 ppid=1588 pid=16632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.437:4251864): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E31302E31372E36312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A35303A3130002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.442:4251865): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674670804.442:4251865): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aae15f03010 items=0 ppid=1588 pid=16633 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.442:4251865): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E37372E36302E3234392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A35303A3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.447:4251866): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674670804.447:4251866): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b242db60010 items=0 ppid=1588 pid=16634 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.447:4251866): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131332E3139352E3137322E362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431373A35323A3432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.453:4251867): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674670804.453:4251867): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9a453eb010 items=0 ppid=1588 pid=16635 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.453:4251867): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E33342E3234302E33332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A31303A3334002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.458:4251868): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674670804.458:4251868): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b25adc66010 items=0 ppid=1588 pid=16636 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.458:4251868): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131392E3139312E37392E3232312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A31303A3339002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.464:4251869): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674670804.464:4251869): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ab083769010 items=0 ppid=1588 pid=16637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.464:4251869): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730034392E39312E3234332E36382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A31363A3530002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670804.469:4251870): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674670804.469:4251870): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ae7e573a010 items=0 ppid=1588 pid=16638 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670804.469:4251870): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3232322E37312E3130312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A31393A3433002D6A0044524F50
type=CRED_DISP msg=audit(1674670805.406:4251871): pid=16592 uid=0 auid=0 ses=258313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670805.407:4251872): pid=16592 uid=0 auid=0 ses=258313 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670820.029:4251873): avc: denied { name_connect } for pid=16417 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674670820.029:4251873): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffce2fe6c90 a2=10 a3=7ffce2fe6c8c items=0 ppid=5547 pid=16417 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670820.029:4251873): proctitle="dovecot/auth"
type=AVC msg=audit(1674670820.042:4251874): avc: denied { write } for pid=16428 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674670820.042:4251874): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffefab07540 a2=6e a3=63d172e4 items=0 ppid=5547 pid=16428 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670820.042:4251874): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674670861.434:4251875): pid=16916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670861.434:4251876): pid=16916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670861.435:4251877): pid=16916 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258316 res=1
type=USER_START msg=audit(1674670861.465:4251878): pid=16916 uid=0 auid=1055 ses=258316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670861.467:4251879): pid=16916 uid=0 auid=1055 ses=258316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670861.749:4251880): pid=16916 uid=0 auid=1055 ses=258316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670861.752:4251881): pid=16916 uid=0 auid=1055 ses=258316 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674670864.444:4251882): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670864.444:4251883): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670864.444:4251884): pid=16935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670864.836:4251885): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=16935 suid=74 rport=44204 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670864.836:4251886): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=16935 suid=74 rport=44204 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.423:4251887): pid=16938 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.424:4251888): pid=16938 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.424:4251889): pid=16938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.447:4251890): pid=16938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.452:4251891): pid=16938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.452:4251892): pid=16938 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.475:4251893): pid=16942 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.475:4251894): pid=16942 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.475:4251895): pid=16942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.488:4251896): pid=16942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.491:4251897): pid=16942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.491:4251898): pid=16942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.513:4251899): pid=16948 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.514:4251900): pid=16948 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.514:4251901): pid=16948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.531:4251902): pid=16948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.535:4251903): pid=16948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.535:4251904): pid=16948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.658:4251905): pid=16954 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.658:4251906): pid=16954 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.658:4251907): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.674:4251908): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.677:4251909): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.677:4251910): pid=16954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.698:4251911): pid=16959 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.698:4251912): pid=16959 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.699:4251913): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.717:4251914): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.720:4251915): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.720:4251916): pid=16959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.741:4251917): pid=16965 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.741:4251918): pid=16965 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.741:4251919): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.754:4251920): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.757:4251921): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.757:4251922): pid=16965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.787:4251923): pid=16970 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.787:4251924): pid=16970 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.787:4251925): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.802:4251926): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.805:4251927): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.805:4251928): pid=16970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.829:4251929): pid=16975 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.829:4251930): pid=16975 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.829:4251931): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.843:4251932): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.846:4251933): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.846:4251934): pid=16975 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.869:4251935): pid=16980 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.869:4251936): pid=16980 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.870:4251937): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.883:4251938): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.885:4251939): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.886:4251940): pid=16980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.907:4251941): pid=16987 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.908:4251942): pid=16987 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.908:4251943): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.922:4251944): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.925:4251945): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.926:4251946): pid=16987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670865.949:4251947): pid=16990 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670865.950:4251948): pid=16990 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674670865.950:4251949): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670865.965:4251950): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670865.968:4251951): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670865.968:4251952): pid=16990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674670866.620:4251953): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674670868.528:4251954): pid=17007 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670868.528:4251955): pid=17007 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674670868.528:4251956): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670868.546:4251957): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670868.608:4251958): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670868.608:4251959): pid=17007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670868.641:4251960): pid=17012 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670868.642:4251961): pid=17012 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674670868.642:4251962): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670868.657:4251963): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674670868.664:4251964): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=USER_END msg=audit(1674670868.740:4251965): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670868.740:4251966): pid=17012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670868.763:4251967): pid=17017 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670868.763:4251968): pid=17017 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670868.763:4251969): pid=17017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670868.779:4251970): pid=17017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670868.898:4251971): pid=17017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670868.898:4251972): pid=17017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670868.937:4251973): pid=17024 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670868.937:4251974): pid=17024 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674670868.937:4251975): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670868.950:4251976): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670868.953:4251977): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670868.953:4251978): pid=17024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670868.978:4251979): pid=17027 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670868.978:4251980): pid=17027 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6D6979346141505463756931787642762E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674670868.979:4251981): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670868.991:4251982): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670868.994:4251983): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670868.994:4251984): pid=17027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670869.017:4251985): pid=17033 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670869.017:4251986): pid=17033 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6D6979346141505463756931787642762E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674670869.017:4251987): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670869.030:4251988): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670869.035:4251989): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670869.035:4251990): pid=17033 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670869.057:4251991): pid=17039 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670869.057:4251992): pid=17039 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6D6979346141505463756931787642762E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674670869.057:4251993): pid=17039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670869.073:4251994): pid=17039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670869.076:4251995): pid=17039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670869.076:4251996): pid=17039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670869.097:4251997): pid=17042 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670869.097:4251998): pid=17042 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674670869.097:4251999): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670869.109:4252000): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670869.114:4252001): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670869.114:4252002): pid=17042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670869.491:4252003): pid=17049 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670869.492:4252004): pid=17049 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674670869.492:4252005): pid=17049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670869.506:4252006): pid=17049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670869.509:4252007): pid=17049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670869.509:4252008): pid=17049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670869.583:4252009): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16935 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670869.583:4252010): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16935 suid=74 rport=44204 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670869.584:4252011): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670869.584:4252012): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670869.584:4252013): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16934 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674670869.584:4252014): pid=16934 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674670869.856:4252015): pid=17055 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670869.856:4252016): pid=17055 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674670869.857:4252017): pid=17055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670869.870:4252018): pid=17055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670869.873:4252019): pid=17055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670869.873:4252020): pid=17055 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670869.894:4252021): pid=17060 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670869.894:4252022): pid=17060 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674670869.894:4252023): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670869.908:4252024): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670869.912:4252025): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670869.912:4252026): pid=17060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670869.933:4252027): pid=17065 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670869.934:4252028): pid=17065 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674670869.934:4252029): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670869.946:4252030): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670869.949:4252031): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670869.949:4252032): pid=17065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670869.975:4252033): pid=17070 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670869.976:4252034): pid=17070 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674670869.976:4252035): pid=17070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670869.989:4252036): pid=17070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670870.139:4252037): pid=17070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670870.139:4252038): pid=17070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670871.022:4252039): pid=17079 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670871.023:4252040): pid=17079 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674670871.023:4252041): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670871.038:4252042): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670871.100:4252043): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670871.100:4252044): pid=17079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670871.133:4252045): pid=17085 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670871.134:4252046): pid=17085 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670871.134:4252047): pid=17085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670871.149:4252048): pid=17085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670872.321:4252049): pid=17085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670872.321:4252050): pid=17085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670872.519:4252051): pid=17096 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670872.519:4252052): pid=17096 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670872.519:4252053): pid=17096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670872.533:4252054): pid=17096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670873.709:4252055): pid=17096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670873.709:4252056): pid=17096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670873.907:4252057): pid=17107 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670873.907:4252058): pid=17107 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670873.907:4252059): pid=17107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670873.922:4252060): pid=17107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670875.778:4252061): pid=17107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670875.778:4252062): pid=17107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670876.020:4252063): pid=17120 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670876.020:4252064): pid=17120 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F7474312026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F747431202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674670876.020:4252065): pid=17120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670876.035:4252066): pid=17120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670877.193:4252067): pid=17120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670877.193:4252068): pid=17120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670877.299:4252069): pid=17133 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670877.300:4252070): pid=17133 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670877.300:4252071): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670877.316:4252072): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670877.712:4252073): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670877.712:4252074): pid=17133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670877.831:4252075): pid=17141 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670877.831:4252076): pid=17141 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670877.831:4252077): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670877.845:4252078): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670880.020:4252079): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670880.020:4252080): pid=17141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670880.259:4252081): pid=17158 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670880.259:4252082): pid=17158 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670880.259:4252083): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670880.274:4252084): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670881.358:4252085): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670881.358:4252086): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670881.565:4252087): pid=17171 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670881.565:4252088): pid=17171 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670881.565:4252089): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670881.582:4252090): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670882.708:4252091): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670882.708:4252092): pid=17171 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674670883.509:4252093): pid=17186 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674670883.509:4252094): pid=17186 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674670883.509:4252095): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674670883.522:4252096): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674670884.569:4252097): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674670884.569:4252098): pid=17186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670887.584:4252099): pid=17223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670887.584:4252100): pid=17223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670887.584:4252101): pid=17223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17223 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670887.785:4252102): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=17223 suid=74 rport=33608 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674670887.785:4252103): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=17223 suid=74 rport=33608 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=? res=success'
type=USER_AUTH msg=audit(1674670889.236:4252104): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=81.200.212.13 addr=81.200.212.13 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674670891.104:4252105): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674670891.308:4252106): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17223 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670891.308:4252107): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17223 suid=74 rport=33608 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670891.309:4252108): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670891.310:4252109): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674670891.310:4252110): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17222 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674670891.310:4252111): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.200.212.13 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674670892.591:4252112): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674670892.591:4252112): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6916738010 items=0 ppid=17242 pid=17247 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670892.591:4252112): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674670892.595:4252113): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674670892.595:4252113): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd3eeb1d010 items=0 ppid=17242 pid=17248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670892.595:4252113): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674670892.599:4252114): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674670892.599:4252114): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa86b57d010 items=0 ppid=17242 pid=17250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670892.599:4252114): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674670892.603:4252115): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674670892.603:4252115): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3ec523f010 items=0 ppid=17242 pid=17251 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670892.603:4252115): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674670892.941:4252116): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674670892.941:4252116): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9487108010 items=0 ppid=17242 pid=17263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670892.941:4252116): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730033342E3130302E3136342E323233002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670892.951:4252117): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674670892.951:4252117): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd8a9000010 items=0 ppid=17242 pid=17264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670892.951:4252117): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640033342E3130302E3136342E323233002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674670892.957:4252118): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674670892.957:4252118): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f100bd82010 items=0 ppid=17242 pid=17265 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670892.957:4252118): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038312E3230302E3231322E3133002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674670892.963:4252119): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674670892.963:4252119): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4cba40e010 items=0 ppid=17242 pid=17266 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670892.963:4252119): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038312E3230302E3231322E3133002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674670921.773:4252120): pid=17358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670921.773:4252121): pid=17358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670921.775:4252122): pid=17358 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258317 res=1
type=USER_START msg=audit(1674670921.809:4252123): pid=17358 uid=0 auid=1055 ses=258317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670921.811:4252124): pid=17358 uid=0 auid=1055 ses=258317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670922.108:4252125): pid=17358 uid=0 auid=1055 ses=258317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670922.111:4252126): pid=17358 uid=0 auid=1055 ses=258317 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674670942.419:4252127): avc: denied { name_connect } for pid=16417 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674670942.419:4252127): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffce2fe6c90 a2=10 a3=7ffce2fe6c8c items=0 ppid=5547 pid=16417 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670942.419:4252127): proctitle="dovecot/auth"
type=AVC msg=audit(1674670942.452:4252128): avc: denied { write } for pid=17425 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674670942.452:4252128): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd180bb590 a2=6e a3=63d1735e items=0 ppid=5547 pid=17425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670942.452:4252128): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674670959.532:4252129): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674670959.532:4252129): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2afff64a5010 items=0 ppid=17490 pid=17495 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674670959.532:4252129): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3138362E36382E313534002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674670981.126:4252130): pid=17558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674670981.126:4252131): pid=17558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674670981.127:4252132): pid=17558 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258318 res=1
type=USER_START msg=audit(1674670981.139:4252133): pid=17558 uid=0 auid=1055 ses=258318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674670981.140:4252134): pid=17558 uid=0 auid=1055 ses=258318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674670981.372:4252135): pid=17558 uid=0 auid=1055 ses=258318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674670981.374:4252136): pid=17558 uid=0 auid=1055 ses=258318 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671041.385:4252137): pid=17741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671041.385:4252138): pid=17741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671041.385:4252139): pid=17741 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258319 res=1
type=USER_START msg=audit(1674671041.399:4252140): pid=17741 uid=0 auid=1055 ses=258319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671041.400:4252141): pid=17741 uid=0 auid=1055 ses=258319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671041.678:4252142): pid=17741 uid=0 auid=1055 ses=258319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671041.680:4252143): pid=17741 uid=0 auid=1055 ses=258319 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671086.340:4252144): avc: denied { read } for pid=17887 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674671086.340:4252144): avc: denied { open } for pid=17887 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671086.340:4252144): arch=c000003e syscall=2 success=yes exit=18 a0=5557adcd7f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671086.340:4252144): proctitle="dovecot/auth"
type=AVC msg=audit(1674671086.341:4252145): avc: denied { getattr } for pid=17887 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671086.341:4252145): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe88c3c670 a2=7ffe88c3c670 a3=fffffc00 items=0 ppid=5547 pid=17887 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671086.341:4252145): proctitle="dovecot/auth"
type=AVC msg=audit(1674671088.398:4252146): avc: denied { name_connect } for pid=17887 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674671088.398:4252146): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe88c3c460 a2=10 a3=7ffe88c3c45c items=0 ppid=5547 pid=17887 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671088.398:4252146): proctitle="dovecot/auth"
type=AVC msg=audit(1674671088.428:4252147): avc: denied { write } for pid=17895 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674671088.428:4252147): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffef47cab50 a2=6e a3=63d173f0 items=0 ppid=5547 pid=17895 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671088.428:4252147): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674671101.695:4252148): pid=17947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671101.695:4252149): pid=17947 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671101.695:4252150): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671101.695:4252151): pid=17947 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258320 res=1
type=CRED_ACQ msg=audit(1674671101.695:4252152): pid=17949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671101.695:4252153): pid=17948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671101.695:4252154): pid=17949 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258321 res=1
type=CRED_ACQ msg=audit(1674671101.696:4252155): pid=17948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671101.696:4252156): pid=17948 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258322 res=1
type=USER_START msg=audit(1674671101.734:4252157): pid=17947 uid=0 auid=0 ses=258320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671101.734:4252158): pid=17949 uid=0 auid=1055 ses=258321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671101.735:4252159): pid=17948 uid=0 auid=0 ses=258322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671101.735:4252160): pid=17949 uid=0 auid=1055 ses=258321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671101.735:4252161): pid=17947 uid=0 auid=0 ses=258320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671101.736:4252162): pid=17948 uid=0 auid=0 ses=258322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671101.919:4252163): pid=17947 uid=0 auid=0 ses=258320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671101.922:4252164): pid=17947 uid=0 auid=0 ses=258320 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671102.101:4252165): pid=17949 uid=0 auid=1055 ses=258321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671102.103:4252166): pid=17949 uid=0 auid=1055 ses=258321 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671105.066:4252167): pid=17948 uid=0 auid=0 ses=258322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671105.068:4252168): pid=17948 uid=0 auid=0 ses=258322 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674671106.097:4252169): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674671106.097:4252169): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b837d45b010 items=0 ppid=17984 pid=17989 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671106.097:4252169): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035392E34352E3231382E313530002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=NETFILTER_CFG msg=audit(1674671112.230:4252170): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674671112.230:4252170): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae605e3c010 items=0 ppid=18006 pid=18011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671112.230:4252170): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232312E342E3135322E313834002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674671152.722:4252171): avc: denied { name_connect } for pid=17887 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674671152.722:4252171): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe88c3c460 a2=10 a3=7ffe88c3c45c items=0 ppid=5547 pid=17887 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671152.722:4252171): proctitle="dovecot/auth"
type=AVC msg=audit(1674671152.753:4252172): avc: denied { write } for pid=18202 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674671152.753:4252172): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdc30778f0 a2=6e a3=63d17430 items=0 ppid=5547 pid=18202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671152.753:4252172): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674671156.640:4252173): avc: denied { read append } for pid=18264 comm="quota-status" name="maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674671156.640:4252173): avc: denied { open } for pid=18264 comm="quota-status" path="/home/remysagr/mail/remysagro.com/sales/maildirsize" dev="vda1" ino=29430984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671156.640:4252173): arch=c000003e syscall=2 success=yes exit=16 a0=555e111c2280 a1=402 a2=7ffe1cae1a10 a3=7f690fe591c0 items=0 ppid=5547 pid=18264 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="quota-status" exe="/usr/libexec/dovecot/quota-status" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671156.640:4252173): proctitle=646F7665636F742F71756F74612D737461747573002D7000706F7374666978
type=AVC msg=audit(1674671160.373:4252174): avc: denied { getattr } for pid=18194 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/.spam/dovecot.index.log" dev="vda1" ino=247725189 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671160.373:4252174): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7fff9c626010 a2=7fff9c626010 a3=7fff9c625a60 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.373:4252174): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674671160.373:4252175): avc: denied { write } for pid=18194 comm="lmtp" name="dovecot.index" dev="vda1" ino=247572915 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671160.373:4252175): arch=c000003e syscall=2 success=yes exit=18 a0=55dcf31bacf0 a1=2 a2=7fff9c625db0 a3=7fff9c625860 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.373:4252175): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674671160.374:4252176): avc: denied { write } for pid=18194 comm="lmtp" name="tmp" dev="vda1" ino=46803730 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674671160.374:4252176): avc: denied { add_name } for pid=18194 comm="lmtp" name="1674671160.M373731P18194.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674671160.374:4252176): avc: denied { create } for pid=18194 comm="lmtp" name="1674671160.M373731P18194.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671160.374:4252176): arch=c000003e syscall=2 success=yes exit=20 a0=55dcf31148c8 a1=2c1 a2=1ff a3=7fff9c625c20 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.374:4252176): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674671160.377:4252177): avc: denied { lock } for pid=18194 comm="lmtp" path="/home/remysagr/mail/remysagro.com/sales/.spam/dovecot.index.log" dev="vda1" ino=247725189 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671160.377:4252177): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7fff9c625c40 a3=63d17438 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.377:4252177): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674671160.378:4252178): avc: denied { remove_name } for pid=18194 comm="lmtp" name="1674671160.M373731P18194.host.nexidigital.com" dev="vda1" ino=48866209 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674671160.378:4252178): avc: denied { rename } for pid=18194 comm="lmtp" name="1674671160.M373731P18194.host.nexidigital.com" dev="vda1" ino=48866209 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671160.378:4252178): arch=c000003e syscall=82 success=yes exit=0 a0=55dcf3111538 a1=55dcf3111598 a2=6a30 a3=7fff9c625be0 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.378:4252178): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674671160.378:4252179): avc: denied { read } for pid=18194 comm="lmtp" name="new" dev="vda1" ino=42371891 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674671160.378:4252179): arch=c000003e syscall=2 success=yes exit=20 a0=55dcf31bfd98 a1=0 a2=0 a3=7fff9c625be0 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.378:4252179): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674671160.381:4252180): avc: denied { unlink } for pid=18194 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=247572907 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671160.381:4252180): arch=c000003e syscall=87 success=yes exit=0 a0=55dcf31c95c0 a1=7fb247f83071 a2=2f9 a3=7fff9c625ce0 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.381:4252180): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674671160.385:4252181): avc: denied { link } for pid=18194 comm="lmtp" name=".temp.host.nexidigital.com.18194.4c667fc3cd81331b" dev="vda1" ino=33481508 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671160.385:4252181): arch=c000003e syscall=86 success=yes exit=0 a0=55dcf3114f98 a1=55dcf3114ef8 a2=1 a3=63d17438 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.385:4252181): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674671160.385:4252182): avc: denied { setattr } for pid=18194 comm="lmtp" name=".temp.host.nexidigital.com.18194.4c667fc3cd81331b" dev="vda1" ino=33481508 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671160.385:4252182): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=3f9 a3=37 items=0 ppid=5547 pid=18194 auid=4294967295 uid=0 gid=1017 euid=1015 suid=0 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671160.385:4252182): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674671161.089:4252183): pid=18284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671161.089:4252184): pid=18284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671161.090:4252185): pid=18284 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258323 res=1
type=USER_START msg=audit(1674671161.107:4252186): pid=18284 uid=0 auid=1055 ses=258323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671161.110:4252187): pid=18284 uid=0 auid=1055 ses=258323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671161.408:4252188): pid=18284 uid=0 auid=1055 ses=258323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671161.410:4252189): pid=18284 uid=0 auid=1055 ses=258323 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671221.425:4252190): pid=18468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671221.426:4252191): pid=18468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671221.426:4252192): pid=18468 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258324 res=1
type=USER_START msg=audit(1674671221.442:4252193): pid=18468 uid=0 auid=1055 ses=258324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671221.443:4252194): pid=18468 uid=0 auid=1055 ses=258324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671221.795:4252195): pid=18468 uid=0 auid=1055 ses=258324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671221.812:4252196): pid=18468 uid=0 auid=1055 ses=258324 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671265.688:4252197): avc: denied { read append } for pid=18639 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674671265.688:4252197): avc: denied { open } for pid=18639 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671265.688:4252197): arch=c000003e syscall=2 success=yes exit=8 a0=555b9e972a60 a1=402 a2=7ffe0621ebb0 a3=7ffe0621e620 items=0 ppid=5547 pid=18639 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671265.688:4252197): proctitle="dovecot/imap"
type=AVC msg=audit(1674671265.689:4252198): avc: denied { getattr } for pid=18639 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671265.689:4252198): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe0621eb10 a2=7ffe0621eb10 a3=7ffe0621e560 items=0 ppid=5547 pid=18639 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671265.689:4252198): proctitle="dovecot/imap"
type=AVC msg=audit(1674671265.689:4252199): avc: denied { write } for pid=18639 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671265.689:4252199): arch=c000003e syscall=2 success=yes exit=10 a0=555b9e977960 a1=2 a2=7ffe0621e8b0 a3=7ffe0621e360 items=0 ppid=5547 pid=18639 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671265.689:4252199): proctitle="dovecot/imap"
type=AVC msg=audit(1674671265.689:4252200): avc: denied { lock } for pid=18639 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671265.689:4252200): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe0621e7b0 a3=63d174a1 items=0 ppid=5547 pid=18639 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671265.689:4252200): proctitle="dovecot/imap"
type=AVC msg=audit(1674671265.689:4252201): avc: denied { read } for pid=18639 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674671265.689:4252201): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=555b9e9a0300 a2=90800 a3=0 items=0 ppid=5547 pid=18639 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671265.689:4252201): proctitle="dovecot/imap"
type=AVC msg=audit(1674671265.690:4252202): avc: denied { getattr } for pid=18639 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671265.690:4252202): arch=c000003e syscall=4 success=yes exit=0 a0=555b9e962a60 a1=7ffe0621eb60 a2=7ffe0621eb60 a3=6f632e6f72676173 items=0 ppid=5547 pid=18639 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671265.690:4252202): proctitle="dovecot/imap"
type=AVC msg=audit(1674671267.477:4252203): avc: denied { write } for pid=18647 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674671267.477:4252203): arch=c000003e syscall=21 success=yes exit=0 a0=55f0ad9654c0 a1=2 a2=7b48 a3=7fff8f0f22a0 items=0 ppid=5547 pid=18647 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671267.477:4252203): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674671281.841:4252205): pid=18707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671281.841:4252204): pid=18706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671281.841:4252206): pid=18707 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671281.841:4252207): pid=18706 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671281.841:4252208): pid=18707 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258325 res=1
type=LOGIN msg=audit(1674671281.841:4252209): pid=18706 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258326 res=1
type=USER_START msg=audit(1674671281.871:4252210): pid=18706 uid=0 auid=0 ses=258326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671281.871:4252211): pid=18707 uid=0 auid=1055 ses=258325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671281.872:4252212): pid=18706 uid=0 auid=0 ses=258326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671281.873:4252213): pid=18707 uid=0 auid=1055 ses=258325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671281.940:4252214): pid=18706 uid=0 auid=0 ses=258326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671281.943:4252215): pid=18706 uid=0 auid=0 ses=258326 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671282.148:4252216): pid=18707 uid=0 auid=1055 ses=258325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671282.150:4252217): pid=18707 uid=0 auid=1055 ses=258325 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671320.738:4252218): avc: denied { name_connect } for pid=17887 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674671320.738:4252218): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffe88c3c460 a2=10 a3=7ffe88c3c45c items=0 ppid=5547 pid=17887 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671320.738:4252218): proctitle="dovecot/auth"
type=AVC msg=audit(1674671320.750:4252219): avc: denied { write } for pid=18637 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674671320.750:4252219): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffda0519670 a2=6e a3=63d174d8 items=0 ppid=5547 pid=18637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671320.750:4252219): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674671331.517:4252220): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674671331.517:4252220): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af25f5f6010 items=0 ppid=18910 pid=18916 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671331.517:4252220): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3232322E3130362E313535002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=NETFILTER_CFG msg=audit(1674671340.970:4252221): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674671340.970:4252221): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b09a4421010 items=0 ppid=18949 pid=18954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671340.970:4252221): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3137392E3130322E323130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674671341.164:4252222): pid=18955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671341.165:4252223): pid=18955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671341.165:4252224): pid=18955 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258327 res=1
type=USER_START msg=audit(1674671341.179:4252225): pid=18955 uid=0 auid=1055 ses=258327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671341.180:4252226): pid=18955 uid=0 auid=1055 ses=258327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671341.496:4252227): pid=18955 uid=0 auid=1055 ses=258327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671341.498:4252228): pid=18955 uid=0 auid=1055 ses=258327 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671401.515:4252229): pid=19194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671401.515:4252230): pid=19192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671401.515:4252231): pid=19193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671401.515:4252232): pid=19194 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671401.515:4252233): pid=19192 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671401.516:4252234): pid=19193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671401.518:4252236): pid=19192 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258329 res=1
type=LOGIN msg=audit(1674671401.518:4252235): pid=19193 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258328 res=1
type=LOGIN msg=audit(1674671401.518:4252237): pid=19194 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258330 res=1
type=USER_START msg=audit(1674671401.616:4252238): pid=19194 uid=0 auid=1055 ses=258330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671401.618:4252239): pid=19192 uid=0 auid=0 ses=258329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671401.618:4252240): pid=19194 uid=0 auid=1055 ses=258330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671401.619:4252241): pid=19192 uid=0 auid=0 ses=258329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671401.622:4252242): pid=19193 uid=0 auid=0 ses=258328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671401.622:4252243): pid=19193 uid=0 auid=0 ses=258328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671401.675:4252244): pid=19192 uid=0 auid=0 ses=258329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671401.681:4252245): pid=19192 uid=0 auid=0 ses=258329 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671402.071:4252246): pid=19194 uid=0 auid=1055 ses=258330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671402.074:4252247): pid=19194 uid=0 auid=1055 ses=258330 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671404.994:4252248): pid=19193 uid=0 auid=0 ses=258328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671404.995:4252249): pid=19193 uid=0 auid=0 ses=258328 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671462.014:4252250): pid=19454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671462.015:4252251): pid=19454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671462.015:4252252): pid=19454 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258331 res=1
type=USER_START msg=audit(1674671462.033:4252253): pid=19454 uid=0 auid=1055 ses=258331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671462.036:4252254): pid=19454 uid=0 auid=1055 ses=258331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671462.319:4252255): pid=19454 uid=0 auid=1055 ses=258331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671462.321:4252256): pid=19454 uid=0 auid=1055 ses=258331 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671464.035:4252257): avc: denied { read } for pid=19491 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674671464.035:4252257): avc: denied { open } for pid=19491 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671464.035:4252257): arch=c000003e syscall=2 success=yes exit=18 a0=55adc9d36f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=19491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671464.035:4252257): proctitle="dovecot/auth"
type=AVC msg=audit(1674671464.035:4252258): avc: denied { getattr } for pid=19491 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671464.035:4252258): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe35633a30 a2=7ffe35633a30 a3=fffffc00 items=0 ppid=5547 pid=19491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671464.035:4252258): proctitle="dovecot/auth"
type=AVC msg=audit(1674671464.551:4252259): avc: denied { name_connect } for pid=19491 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674671464.551:4252259): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe35633820 a2=10 a3=7ffe3563381c items=0 ppid=5547 pid=19491 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671464.551:4252259): proctitle="dovecot/auth"
type=AVC msg=audit(1674671464.581:4252260): avc: denied { write } for pid=19520 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674671464.581:4252260): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff53fecf30 a2=6e a3=63d17568 items=0 ppid=5547 pid=19520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671464.581:4252260): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674671505.034:4252261): pid=19714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671505.034:4252262): pid=19714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671505.034:4252263): pid=19714 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19714 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.412:4252264): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.412:4252265): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.413:4252266): pid=19744 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19744 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.414:4252267): pid=19748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.414:4252268): pid=19748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.414:4252269): pid=19748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19748 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.426:4252270): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.426:4252271): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.426:4252272): pid=19749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.426:4252273): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.427:4252274): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.427:4252275): pid=19743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19743 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.429:4252276): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.429:4252277): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.429:4252278): pid=19747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19747 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.430:4252279): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.430:4252280): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.430:4252281): pid=19750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.430:4252282): pid=19755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.430:4252283): pid=19755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.431:4252284): pid=19755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19755 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.431:4252285): pid=19752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.431:4252286): pid=19752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.431:4252287): pid=19752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19752 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.433:4252288): pid=19751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.433:4252289): pid=19751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.433:4252290): pid=19751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19751 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.433:4252291): pid=19754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.434:4252292): pid=19754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.434:4252293): pid=19754 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19754 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.434:4252294): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.434:4252295): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.434:4252296): pid=19753 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19753 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.435:4252297): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.435:4252298): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.435:4252299): pid=19756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.436:4252300): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.436:4252301): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.436:4252302): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.438:4252303): pid=19759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.439:4252304): pid=19759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.439:4252305): pid=19759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19759 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.439:4252306): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.439:4252307): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.439:4252308): pid=19758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19758 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.445:4252309): pid=19760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.446:4252310): pid=19760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.446:4252311): pid=19760 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19760 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.456:4252312): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.457:4252313): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.457:4252314): pid=19761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19761 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.508:4252315): pid=19762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.508:4252316): pid=19762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.508:4252317): pid=19762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19762 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.527:4252318): pid=19763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.527:4252319): pid=19763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.527:4252320): pid=19763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19763 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.540:4252321): pid=19764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.541:4252322): pid=19764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.541:4252323): pid=19764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19764 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.622:4252324): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.622:4252325): pid=19768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.622:4252326): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.622:4252327): pid=19769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.622:4252328): pid=19768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.622:4252329): pid=19768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19768 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.623:4252330): pid=19770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.623:4252331): pid=19770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.623:4252332): pid=19770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.625:4252333): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.626:4252334): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.626:4252335): pid=19771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.641:4252336): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.641:4252337): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.641:4252338): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.641:4252339): pid=19773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.641:4252340): pid=19773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.641:4252341): pid=19773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.653:4252342): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.653:4252343): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.653:4252344): pid=19774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19774 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.655:4252345): pid=19775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.655:4252346): pid=19775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671506.655:4252347): pid=19775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19775 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.728:4252348): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19751 suid=74 rport=25055 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.728:4252349): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19747 suid=74 rport=25077 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.728:4252350): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19747 suid=74 rport=25077 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.728:4252351): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19751 suid=74 rport=25055 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.729:4252352): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19762 suid=74 rport=25007 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.729:4252353): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19762 suid=74 rport=25007 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.729:4252354): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19748 suid=74 rport=25017 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.730:4252355): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19748 suid=74 rport=25017 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.731:4252356): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19769 suid=74 rport=25067 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.731:4252357): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19769 suid=74 rport=25067 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.735:4252358): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19744 suid=74 rport=25035 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.735:4252359): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19744 suid=74 rport=25035 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.746:4252360): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19768 suid=74 rport=25089 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.746:4252361): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19768 suid=74 rport=25089 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.754:4252362): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19749 suid=74 rport=25047 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.754:4252363): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19749 suid=74 rport=25047 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.760:4252364): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19758 suid=74 rport=25033 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.760:4252365): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19758 suid=74 rport=25033 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.763:4252366): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19755 suid=74 rport=25051 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.763:4252367): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19755 suid=74 rport=25051 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.767:4252368): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19759 suid=74 rport=25059 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.767:4252369): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19759 suid=74 rport=25059 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.768:4252370): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19743 suid=74 rport=25019 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.768:4252371): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19743 suid=74 rport=25019 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.773:4252372): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19761 suid=74 rport=25087 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.773:4252373): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19761 suid=74 rport=25087 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.776:4252374): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19750 suid=74 rport=25025 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.776:4252375): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19750 suid=74 rport=25025 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.777:4252376): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19771 suid=74 rport=25009 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.777:4252377): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19771 suid=74 rport=25009 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.779:4252378): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19752 suid=74 rport=25027 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.779:4252379): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19770 suid=74 rport=25045 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.779:4252380): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19752 suid=74 rport=25027 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.779:4252381): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19770 suid=74 rport=25045 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.781:4252382): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19753 suid=74 rport=25091 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.781:4252383): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19753 suid=74 rport=25091 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.785:4252384): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19756 suid=74 rport=25029 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.785:4252385): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19756 suid=74 rport=25029 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.788:4252386): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19757 suid=74 rport=25039 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.788:4252387): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19757 suid=74 rport=25039 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.788:4252388): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19754 suid=74 rport=25031 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.788:4252389): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19754 suid=74 rport=25031 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.789:4252390): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19760 suid=74 rport=25079 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.789:4252391): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19760 suid=74 rport=25079 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.792:4252392): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19763 suid=74 rport=25085 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.792:4252393): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19763 suid=74 rport=25085 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.805:4252394): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19764 suid=74 rport=25073 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.805:4252395): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19764 suid=74 rport=25073 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.817:4252396): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19774 suid=74 rport=25015 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.817:4252397): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19774 suid=74 rport=25015 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.817:4252398): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19775 suid=74 rport=25013 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.817:4252399): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19775 suid=74 rport=25013 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.818:4252400): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19773 suid=74 rport=25049 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.818:4252401): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19773 suid=74 rport=25049 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.822:4252402): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19772 suid=74 rport=25071 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671506.823:4252403): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=19772 suid=74 rport=25071 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=USER_AUTH msg=audit(1674671508.154:4252404): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.154:4252405): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.166:4252406): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.166:4252407): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.166:4252408): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.168:4252409): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.172:4252410): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.175:4252411): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.202:4252412): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.205:4252413): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.208:4252414): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.215:4252415): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.226:4252416): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.226:4252417): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.228:4252418): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.230:4252419): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.233:4252420): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="mysql" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.235:4252421): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.237:4252422): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.238:4252423): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.243:4252424): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.273:4252425): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.275:4252426): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.284:4252427): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.332:4252428): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.333:4252429): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.349:4252430): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671508.360:4252431): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=125.74.239.20 addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.665:4252432): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.665:4252433): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.677:4252434): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.677:4252435): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.677:4252436): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.679:4252437): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.683:4252438): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.686:4252439): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.714:4252440): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.716:4252441): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.719:4252442): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.727:4252443): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.738:4252444): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.738:4252445): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.738:4252446): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.741:4252447): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.744:4252448): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.746:4252449): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.748:4252450): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.750:4252451): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.755:4252452): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.784:4252453): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.786:4252454): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.796:4252455): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.844:4252456): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.845:4252457): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.861:4252458): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671509.871:4252459): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.018:4252460): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19744 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.018:4252461): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19744 suid=74 rport=25035 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.019:4252462): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.019:4252463): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.019:4252464): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19720 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.019:4252465): pid=19720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.019:4252466): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19751 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.019:4252467): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19751 suid=74 rport=25055 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.020:4252468): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.021:4252469): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.021:4252470): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19717 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.021:4252471): pid=19717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.032:4252472): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19748 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.032:4252473): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19748 suid=74 rport=25017 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.032:4252474): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19747 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.032:4252475): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19747 suid=74 rport=25077 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.033:4252476): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19769 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.033:4252477): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19769 suid=74 rport=25067 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.033:4252478): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.033:4252480): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.033:4252479): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.033:4252481): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19718 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.033:4252482): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.033:4252483): pid=19718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.033:4252484): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19719 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.034:4252485): pid=19719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.034:4252486): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19762 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.035:4252487): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19762 suid=74 rport=25007 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.035:4252488): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.035:4252489): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.035:4252490): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19721 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.035:4252491): pid=19721 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.036:4252492): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.036:4252493): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.036:4252494): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19723 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.036:4252495): pid=19723 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.038:4252496): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19768 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.038:4252497): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19768 suid=74 rport=25089 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.039:4252498): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.039:4252499): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.039:4252500): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19722 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.040:4252501): pid=19722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.040:4252502): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19749 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.040:4252503): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19749 suid=74 rport=25047 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.041:4252504): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.041:4252505): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.042:4252506): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19725 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.042:4252507): pid=19725 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.071:4252508): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19759 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.071:4252509): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19759 suid=74 rport=25059 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.072:4252510): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19761 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.072:4252511): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19761 suid=74 rport=25087 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.073:4252512): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.073:4252513): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.073:4252514): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.073:4252515): pid=19724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.073:4252516): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.073:4252517): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.073:4252518): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19728 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.073:4252519): pid=19728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.078:4252520): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19755 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.078:4252521): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19755 suid=74 rport=25051 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.079:4252522): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.079:4252523): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.079:4252524): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19729 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.080:4252525): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.086:4252526): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19743 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.086:4252527): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19743 suid=74 rport=25019 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.088:4252528): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.088:4252529): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.088:4252530): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19733 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.088:4252531): pid=19733 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.097:4252532): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19750 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.097:4252533): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19750 suid=74 rport=25025 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.098:4252534): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19752 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.098:4252535): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19752 suid=74 rport=25027 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.098:4252536): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19770 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.098:4252537): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19770 suid=74 rport=25045 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.099:4252538): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.099:4252539): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.099:4252540): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.099:4252542): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.099:4252541): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19734 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.099:4252543): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19731 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.099:4252544): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=USER_LOGIN msg=audit(1674671510.099:4252545): pid=19731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.100:4252546): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.100:4252547): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.100:4252548): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.100:4252549): pid=19735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.100:4252550): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19760 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.100:4252551): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19760 suid=74 rport=25079 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.100:4252552): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19753 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.100:4252553): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19753 suid=74 rport=25091 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.101:4252554): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.101:4252555): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.102:4252556): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.102:4252557): pid=19736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.102:4252558): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.102:4252559): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.102:4252560): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19727 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.102:4252561): pid=19727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.106:4252562): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19771 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.106:4252563): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19771 suid=74 rport=25009 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.107:4252564): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19758 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.107:4252565): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19758 suid=74 rport=25033 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.108:4252566): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.108:4252567): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.108:4252568): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.108:4252569): pid=19737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.108:4252570): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19757 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.108:4252571): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.108:4252572): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19757 suid=74 rport=25039 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.108:4252573): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.109:4252574): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.109:4252575): pid=19726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.110:4252576): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.110:4252577): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.110:4252578): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19732 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.110:4252579): pid=19732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.116:4252580): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19754 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.116:4252581): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19754 suid=74 rport=25031 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.117:4252582): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.117:4252583): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.118:4252584): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.118:4252585): pid=19738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.146:4252586): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19756 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.146:4252587): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19756 suid=74 rport=25029 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.147:4252588): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.148:4252589): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.148:4252590): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19730 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.148:4252591): pid=19730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.155:4252592): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19763 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.155:4252593): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19763 suid=74 rport=25085 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.157:4252594): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.157:4252595): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.157:4252596): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19740 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.157:4252597): pid=19740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.164:4252598): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19764 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.164:4252599): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19764 suid=74 rport=25073 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.165:4252600): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.166:4252601): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.166:4252602): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19739 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.166:4252603): pid=19739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.221:4252604): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19774 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.221:4252605): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19774 suid=74 rport=25015 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.223:4252606): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.223:4252607): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19775 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.223:4252608): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.223:4252609): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19775 suid=74 rport=25013 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.223:4252610): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19741 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.223:4252611): pid=19741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.224:4252612): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.224:4252613): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.224:4252614): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19742 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.224:4252615): pid=19742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.241:4252616): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19773 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.241:4252617): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19773 suid=74 rport=25049 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.243:4252618): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.243:4252619): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.243:4252620): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19745 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.243:4252621): pid=19745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671510.253:4252622): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19772 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.253:4252623): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19772 suid=74 rport=25071 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.254:4252624): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.254:4252625): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671510.254:4252626): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19746 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671510.254:4252627): pid=19746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.74.239.20 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674671513.751:4252628): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674671513.751:4252628): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f135313f010 items=0 ppid=19809 pid=19814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671513.751:4252628): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674671513.755:4252629): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674671513.755:4252629): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fef8ed9a010 items=0 ppid=19809 pid=19815 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671513.755:4252629): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674671513.760:4252630): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674671513.760:4252630): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f68811a8010 items=0 ppid=19809 pid=19816 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671513.760:4252630): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674671513.765:4252631): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674671513.765:4252631): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6cd3969010 items=0 ppid=19809 pid=19817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671513.765:4252631): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674671514.059:4252632): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674671514.059:4252632): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f93a45de010 items=0 ppid=19809 pid=19832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671514.059:4252632): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730033342E3130312E3133302E3432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674671514.065:4252633): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674671514.065:4252633): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdfa8ded010 items=0 ppid=19809 pid=19833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671514.065:4252633): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640033342E3130312E3133302E3432002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674671514.071:4252634): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674671514.071:4252634): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc20f803010 items=0 ppid=19809 pid=19834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671514.071:4252634): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003132352E37342E3233392E3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674671514.076:4252635): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674671514.076:4252635): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efed0610010 items=0 ppid=19809 pid=19835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671514.076:4252635): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003132352E37342E3233392E3230002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674671521.338:4252636): pid=19868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671521.339:4252637): pid=19868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671521.340:4252638): pid=19868 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258332 res=1
type=USER_START msg=audit(1674671521.357:4252639): pid=19868 uid=0 auid=1055 ses=258332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671521.359:4252640): pid=19868 uid=0 auid=1055 ses=258332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671521.617:4252641): pid=19868 uid=0 auid=1055 ses=258332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671521.619:4252642): pid=19868 uid=0 auid=1055 ses=258332 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674671551.785:4252643): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671551.785:4252644): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671551.785:4252645): pid=19987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671552.615:4252646): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=19987 suid=74 rport=44968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671552.615:4252647): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=19987 suid=74 rport=44968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674671553.390:4252648): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671554.746:4252649): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671555.019:4252650): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19987 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671555.019:4252651): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19987 suid=74 rport=44968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671555.020:4252652): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671555.020:4252653): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671555.020:4252654): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19983 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671555.020:4252655): pid=19983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674671581.635:4252656): pid=20068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671581.635:4252657): pid=20068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671581.636:4252658): pid=20068 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258333 res=1
type=USER_START msg=audit(1674671581.652:4252659): pid=20068 uid=0 auid=1055 ses=258333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671581.653:4252660): pid=20068 uid=0 auid=1055 ses=258333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671581.935:4252661): pid=20068 uid=0 auid=1055 ses=258333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671581.936:4252662): pid=20068 uid=0 auid=1055 ses=258333 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671584.612:4252663): avc: denied { name_connect } for pid=19491 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674671584.612:4252663): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe35633820 a2=10 a3=7ffe3563381c items=0 ppid=5547 pid=19491 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671584.612:4252663): proctitle="dovecot/auth"
type=AVC msg=audit(1674671584.647:4252664): avc: denied { write } for pid=20088 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674671584.647:4252664): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb8ffde60 a2=6e a3=63d175e0 items=0 ppid=5547 pid=20088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671584.647:4252664): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674671641.952:4252665): pid=20268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671641.952:4252666): pid=20268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671641.952:4252667): pid=20268 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258334 res=1
type=USER_START msg=audit(1674671641.967:4252668): pid=20268 uid=0 auid=1055 ses=258334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671641.969:4252669): pid=20268 uid=0 auid=1055 ses=258334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671642.223:4252670): pid=20268 uid=0 auid=1055 ses=258334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671642.224:4252671): pid=20268 uid=0 auid=1055 ses=258334 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671688.262:4252672): avc: denied { read } for pid=20422 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674671688.262:4252672): avc: denied { open } for pid=20422 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671688.262:4252672): arch=c000003e syscall=2 success=yes exit=18 a0=55a024605f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671688.262:4252672): proctitle="dovecot/auth"
type=AVC msg=audit(1674671688.262:4252673): avc: denied { getattr } for pid=20422 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671688.262:4252673): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc5d5981c0 a2=7ffc5d5981c0 a3=fffffc00 items=0 ppid=5547 pid=20422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671688.262:4252673): proctitle="dovecot/auth"
type=AVC msg=audit(1674671690.743:4252674): avc: denied { write } for pid=20432 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674671690.743:4252674): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc1db02470 a2=6e a3=63d1764a items=0 ppid=5547 pid=20432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671690.743:4252674): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674671701.240:4252675): pid=20473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671701.240:4252676): pid=20475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671701.240:4252677): pid=20473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671701.240:4252678): pid=20473 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258335 res=1
type=CRED_ACQ msg=audit(1674671701.240:4252679): pid=20475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671701.241:4252680): pid=20472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671701.241:4252681): pid=20475 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258336 res=1
type=CRED_ACQ msg=audit(1674671701.241:4252682): pid=20472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671701.241:4252683): pid=20472 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258337 res=1
type=USER_ACCT msg=audit(1674671701.244:4252684): pid=20474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671701.244:4252685): pid=20474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671701.244:4252686): pid=20474 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258338 res=1
type=USER_START msg=audit(1674671701.286:4252687): pid=20472 uid=0 auid=0 ses=258337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671701.286:4252688): pid=20473 uid=0 auid=0 ses=258335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671701.287:4252689): pid=20474 uid=0 auid=0 ses=258338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671701.287:4252690): pid=20472 uid=0 auid=0 ses=258337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671701.287:4252691): pid=20473 uid=0 auid=0 ses=258335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671701.288:4252692): pid=20475 uid=0 auid=1055 ses=258336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671701.288:4252693): pid=20474 uid=0 auid=0 ses=258338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671701.293:4252694): pid=20475 uid=0 auid=1055 ses=258336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671701.378:4252695): pid=20473 uid=0 auid=0 ses=258335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671701.383:4252696): pid=20473 uid=0 auid=0 ses=258335 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671701.400:4252697): pid=20474 uid=0 auid=0 ses=258338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671701.401:4252698): pid=20474 uid=0 auid=0 ses=258338 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671701.662:4252699): pid=20475 uid=0 auid=1055 ses=258336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671701.664:4252700): pid=20475 uid=0 auid=1055 ses=258336 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671704.623:4252701): pid=20472 uid=0 auid=0 ses=258337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671704.625:4252702): pid=20472 uid=0 auid=0 ses=258337 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671707.944:4252703): avc: denied { name_connect } for pid=20422 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674671707.944:4252703): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc5d597fb0 a2=10 a3=7ffc5d597fac items=0 ppid=5547 pid=20422 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671707.944:4252703): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674671761.645:4252704): pid=20704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671761.645:4252705): pid=20704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671761.647:4252706): pid=20704 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258339 res=1
type=USER_START msg=audit(1674671761.664:4252707): pid=20704 uid=0 auid=1055 ses=258339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671761.666:4252708): pid=20704 uid=0 auid=1055 ses=258339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671761.967:4252709): pid=20704 uid=0 auid=1055 ses=258339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671761.970:4252710): pid=20704 uid=0 auid=1055 ses=258339 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671821.986:4252711): pid=20888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671821.986:4252712): pid=20888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671821.987:4252713): pid=20888 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258340 res=1
type=USER_START msg=audit(1674671822.001:4252714): pid=20888 uid=0 auid=1055 ses=258340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671822.002:4252715): pid=20888 uid=0 auid=1055 ses=258340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671822.359:4252716): pid=20888 uid=0 auid=1055 ses=258340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671822.360:4252717): pid=20888 uid=0 auid=1055 ses=258340 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671824.038:4252718): avc: denied { read } for pid=20923 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674671824.038:4252718): avc: denied { open } for pid=20923 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671824.038:4252718): arch=c000003e syscall=2 success=yes exit=18 a0=5556827a5f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671824.038:4252718): proctitle="dovecot/auth"
type=AVC msg=audit(1674671824.038:4252719): avc: denied { getattr } for pid=20923 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671824.038:4252719): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff1767a500 a2=7fff1767a500 a3=fffffc00 items=0 ppid=5547 pid=20923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671824.038:4252719): proctitle="dovecot/auth"
type=AVC msg=audit(1674671824.555:4252720): avc: denied { name_connect } for pid=20923 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674671824.555:4252720): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff1767a2f0 a2=10 a3=7fff1767a2ec items=0 ppid=5547 pid=20923 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671824.555:4252720): proctitle="dovecot/auth"
type=AVC msg=audit(1674671824.583:4252721): avc: denied { write } for pid=20951 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674671824.583:4252721): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffb8232ea0 a2=6e a3=63d176d0 items=0 ppid=5547 pid=20951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671824.583:4252721): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674671881.378:4252722): pid=21182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671881.378:4252723): pid=21182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671881.380:4252724): pid=21182 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258341 res=1
type=USER_START msg=audit(1674671881.396:4252725): pid=21182 uid=0 auid=1055 ses=258341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671881.398:4252726): pid=21182 uid=0 auid=1055 ses=258341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671881.698:4252727): pid=21182 uid=0 auid=1055 ses=258341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671881.700:4252728): pid=21182 uid=0 auid=1055 ses=258341 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674671890.186:4252729): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674671890.186:4252729): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6b75aa3010 items=0 ppid=21215 pid=21223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671890.186:4252729): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3132312E3136352E3130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674671941.719:4252730): pid=21382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674671941.719:4252731): pid=21381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671941.720:4252732): pid=21382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674671941.720:4252733): pid=21381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674671941.720:4252734): pid=21382 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258342 res=1
type=LOGIN msg=audit(1674671941.720:4252735): pid=21381 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258343 res=1
type=USER_START msg=audit(1674671941.759:4252736): pid=21381 uid=0 auid=0 ses=258343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674671941.759:4252737): pid=21382 uid=0 auid=1055 ses=258342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671941.761:4252738): pid=21382 uid=0 auid=1055 ses=258342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674671941.762:4252739): pid=21381 uid=0 auid=0 ses=258343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671942.073:4252740): pid=21382 uid=0 auid=1055 ses=258342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671942.076:4252741): pid=21382 uid=0 auid=1055 ses=258342 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674671943.152:4252742): pid=21381 uid=0 auid=0 ses=258343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674671943.154:4252743): pid=21381 uid=0 auid=0 ses=258343 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674671968.657:4252744): avc: denied { read } for pid=21494 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674671968.657:4252744): avc: denied { open } for pid=21494 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671968.657:4252744): arch=c000003e syscall=2 success=yes exit=18 a0=5599e5ca2f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=21494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671968.657:4252744): proctitle="dovecot/auth"
type=AVC msg=audit(1674671968.657:4252745): avc: denied { getattr } for pid=21494 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674671968.657:4252745): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffda18893e0 a2=7ffda18893e0 a3=fffffc00 items=0 ppid=5547 pid=21494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671968.657:4252745): proctitle="dovecot/auth"
type=AVC msg=audit(1674671970.104:4252746): avc: denied { write } for pid=21499 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674671970.104:4252746): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd390361c0 a2=6e a3=63d17762 items=0 ppid=5547 pid=21499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674671970.104:4252746): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674671987.597:4252747): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671987.597:4252748): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671987.597:4252749): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671987.809:4252750): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=21549 suid=74 rport=12986 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674671987.809:4252751): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=21549 suid=74 rport=12986 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=? res=success'
type=USER_AUTH msg=audit(1674671988.746:4252752): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=209.141.55.27 addr=209.141.55.27 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674671990.489:4252753): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674671990.702:4252754): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21549 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671990.702:4252755): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21549 suid=74 rport=12986 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671990.703:4252756): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671990.703:4252757): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674671990.703:4252758): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674671990.703:4252759): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.141.55.27 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674672001.171:4252760): pid=21589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672001.171:4252761): pid=21588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672001.171:4252762): pid=21590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672001.171:4252763): pid=21588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672001.171:4252764): pid=21589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672001.171:4252765): pid=21590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672001.173:4252766): pid=21590 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258344 res=1
type=LOGIN msg=audit(1674672001.173:4252767): pid=21588 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258345 res=1
type=LOGIN msg=audit(1674672001.173:4252768): pid=21589 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258346 res=1
type=USER_START msg=audit(1674672001.211:4252769): pid=21588 uid=0 auid=0 ses=258345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674672001.212:4252770): pid=21590 uid=0 auid=1055 ses=258344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674672001.213:4252771): pid=21589 uid=0 auid=0 ses=258346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672001.213:4252772): pid=21588 uid=0 auid=0 ses=258345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672001.213:4252773): pid=21589 uid=0 auid=0 ses=258346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672001.215:4252774): pid=21590 uid=0 auid=1055 ses=258344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672001.237:4252775): pid=21588 uid=0 auid=0 ses=258345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672001.240:4252776): pid=21588 uid=0 auid=0 ses=258345 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672001.469:4252777): pid=21590 uid=0 auid=1055 ses=258344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672001.471:4252778): pid=21590 uid=0 auid=1055 ses=258344 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672004.558:4252779): pid=21589 uid=0 auid=0 ses=258346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672004.559:4252780): pid=21589 uid=0 auid=0 ses=258346 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672061.588:4252781): pid=21789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672061.588:4252782): pid=21789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672061.588:4252783): pid=21789 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258347 res=1
type=USER_START msg=audit(1674672061.610:4252784): pid=21789 uid=0 auid=1055 ses=258347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672061.612:4252785): pid=21789 uid=0 auid=1055 ses=258347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672061.920:4252786): pid=21789 uid=0 auid=1055 ses=258347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672061.922:4252787): pid=21789 uid=0 auid=1055 ses=258347 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674672101.990:4252788): avc: denied { read } for pid=21936 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674672101.990:4252788): avc: denied { open } for pid=21936 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672101.990:4252788): arch=c000003e syscall=2 success=yes exit=18 a0=55a6bd75ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=21936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672101.990:4252788): proctitle="dovecot/auth"
type=AVC msg=audit(1674672101.990:4252789): avc: denied { getattr } for pid=21936 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672101.990:4252789): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdae7da1f0 a2=7ffdae7da1f0 a3=fffffc00 items=0 ppid=5547 pid=21936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672101.990:4252789): proctitle="dovecot/auth"
type=AVC msg=audit(1674672102.008:4252790): avc: denied { write } for pid=21937 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674672102.008:4252790): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdbbd2db40 a2=6e a3=63d177e6 items=0 ppid=5547 pid=21937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672102.008:4252790): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674672102.022:4252791): avc: denied { read append } for pid=21935 comm="lmtp" name="maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674672102.022:4252791): avc: denied { open } for pid=21935 comm="lmtp" path="/home/wwwtestugo/mail/maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672102.022:4252791): arch=c000003e syscall=2 success=yes exit=17 a0=55e80a639a00 a1=402 a2=7ffd962f25d0 a3=fffff800 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672102.022:4252791): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674672102.024:4252792): avc: denied { getattr } for pid=21935 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672102.024:4252792): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffd962f3450 a2=7ffd962f3450 a3=7ffd962f2ea0 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672102.024:4252792): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674672102.024:4252793): avc: denied { write } for pid=21935 comm="lmtp" name="dovecot.index" dev="vda1" ino=47725134 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672102.024:4252793): arch=c000003e syscall=2 success=yes exit=18 a0=55e80a677bb0 a1=2 a2=7ffd962f31f0 a3=7ffd962f2ca0 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672102.024:4252793): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674672102.487:4252794): avc: denied { read write } for pid=21935 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674672102.487:4252794): avc: denied { open } for pid=21935 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672102.487:4252794): arch=c000003e syscall=2 success=yes exit=19 a0=55e80a66d290 a1=2 a2=7ffd962f3470 a3=7ffd962f3120 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672102.487:4252794): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674672102.488:4252795): avc: denied { getattr } for pid=21935 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672102.488:4252795): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffd962f35d0 a2=7ffd962f35d0 a3=7ffd962f2fa0 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672102.488:4252795): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674672105.076:4252796): avc: denied { write } for pid=21935 comm="lmtp" name="tmp" dev="vda1" ino=134000050 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674672105.076:4252796): avc: denied { add_name } for pid=21935 comm="lmtp" name="1674672102.M24708P21935.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674672105.076:4252796): avc: denied { create } for pid=21935 comm="lmtp" name="1674672102.M24708P21935.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672105.076:4252796): arch=c000003e syscall=2 success=yes exit=21 a0=55e80a5cecb0 a1=2c1 a2=1ff a3=7ffd962f3060 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672105.076:4252796): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674672105.142:4252797): avc: denied { lock } for pid=21935 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672105.142:4252797): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffd962f3080 a3=63d177e9 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672105.142:4252797): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674672105.430:4252798): avc: denied { remove_name } for pid=21935 comm="lmtp" name="1674672102.M24708P21935.host.nexidigital.com" dev="vda1" ino=130281650 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674672105.430:4252798): avc: denied { rename } for pid=21935 comm="lmtp" name="1674672102.M24708P21935.host.nexidigital.com" dev="vda1" ino=130281650 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672105.430:4252798): arch=c000003e syscall=82 success=yes exit=0 a0=55e80a5ce5a0 a1=55e80a5ce5e8 a2=69f8 a3=7ffd962f3020 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672105.430:4252798): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674672105.432:4252799): avc: denied { read } for pid=21935 comm="lmtp" name="new" dev="vda1" ino=126223302 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674672105.432:4252799): arch=c000003e syscall=2 success=yes exit=21 a0=55e80a67c490 a1=0 a2=0 a3=7ffd962f3020 items=0 ppid=5547 pid=21935 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672105.432:4252799): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674672121.940:4252800): pid=21996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672121.940:4252801): pid=21996 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672121.941:4252802): pid=21996 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258348 res=1
type=USER_START msg=audit(1674672121.956:4252803): pid=21996 uid=0 auid=1055 ses=258348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672121.958:4252804): pid=21996 uid=0 auid=1055 ses=258348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672122.188:4252805): pid=21996 uid=0 auid=1055 ses=258348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672122.190:4252806): pid=21996 uid=0 auid=1055 ses=258348 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674672142.576:4252807): avc: denied { name_connect } for pid=21936 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674672142.576:4252807): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffdae7d9fe0 a2=10 a3=7ffdae7d9fdc items=0 ppid=5547 pid=21936 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672142.576:4252807): proctitle="dovecot/auth"
type=AVC msg=audit(1674672142.587:4252808): avc: denied { write } for pid=21937 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674672142.587:4252808): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdbbd2db30 a2=6e a3=63d1780e items=0 ppid=5547 pid=21937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672142.587:4252808): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674672164.840:4252809): avc: denied { name_connect } for pid=21936 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674672164.840:4252809): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffdae7d9fe0 a2=10 a3=7ffdae7d9fdc items=0 ppid=5547 pid=21936 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672164.840:4252809): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674672165.935:4252810): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674672165.935:4252810): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b13a7507010 items=0 ppid=22250 pid=22255 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672165.935:4252810): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034332E3133382E37362E313439002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674672172.199:4252811): avc: denied { read append } for pid=22272 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674672172.199:4252811): avc: denied { open } for pid=22272 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672172.199:4252811): arch=c000003e syscall=2 success=yes exit=8 a0=5561c80aca60 a1=402 a2=7ffee62e5ce0 a3=7ffee62e5760 items=0 ppid=5547 pid=22272 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672172.199:4252811): proctitle="dovecot/imap"
type=AVC msg=audit(1674672172.199:4252812): avc: denied { getattr } for pid=22272 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672172.199:4252812): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffee62e5c40 a2=7ffee62e5c40 a3=7ffee62e56a0 items=0 ppid=5547 pid=22272 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672172.199:4252812): proctitle="dovecot/imap"
type=AVC msg=audit(1674672172.199:4252813): avc: denied { write } for pid=22272 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672172.199:4252813): arch=c000003e syscall=2 success=yes exit=10 a0=5561c80b1960 a1=2 a2=7ffee62e59e0 a3=7ffee62e54a0 items=0 ppid=5547 pid=22272 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672172.199:4252813): proctitle="dovecot/imap"
type=AVC msg=audit(1674672172.200:4252814): avc: denied { lock } for pid=22272 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672172.200:4252814): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffee62e58e0 a3=63d1782c items=0 ppid=5547 pid=22272 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672172.200:4252814): proctitle="dovecot/imap"
type=AVC msg=audit(1674672172.201:4252815): avc: denied { getattr } for pid=22272 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672172.201:4252815): arch=c000003e syscall=4 success=yes exit=0 a0=5561c809ca60 a1=7ffee62e5c90 a2=7ffee62e5c90 a3=6f632e6f72676173 items=0 ppid=5547 pid=22272 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672172.201:4252815): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674672181.210:4252816): pid=22303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672181.210:4252817): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672181.210:4252818): pid=22303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672181.210:4252819): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672181.210:4252820): pid=22303 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258349 res=1
type=LOGIN msg=audit(1674672181.210:4252821): pid=22302 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258350 res=1
type=USER_START msg=audit(1674672181.245:4252822): pid=22303 uid=0 auid=1055 ses=258349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674672181.246:4252823): pid=22302 uid=0 auid=0 ses=258350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672181.248:4252824): pid=22303 uid=0 auid=1055 ses=258349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672181.248:4252825): pid=22302 uid=0 auid=0 ses=258350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672181.312:4252826): pid=22302 uid=0 auid=0 ses=258350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672181.314:4252827): pid=22302 uid=0 auid=0 ses=258350 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672181.525:4252828): pid=22303 uid=0 auid=1055 ses=258349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672181.528:4252829): pid=22303 uid=0 auid=1055 ses=258349 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672241.545:4252830): pid=22511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672241.545:4252831): pid=22511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672241.545:4252832): pid=22511 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258351 res=1
type=USER_START msg=audit(1674672241.559:4252833): pid=22511 uid=0 auid=1055 ses=258351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672241.560:4252834): pid=22511 uid=0 auid=1055 ses=258351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672241.797:4252835): pid=22511 uid=0 auid=1055 ses=258351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672241.800:4252836): pid=22511 uid=0 auid=1055 ses=258351 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674672268.790:4252837): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674672268.790:4252837): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2123b4d010 items=0 ppid=22621 pid=22626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672268.790:4252837): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E31362E382E32002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431383A3434
type=USER_ACCT msg=audit(1674672301.818:4252839): pid=22719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672301.818:4252838): pid=22718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672301.819:4252840): pid=22718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672301.819:4252841): pid=22719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672301.819:4252842): pid=22718 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258352 res=1
type=LOGIN msg=audit(1674672301.819:4252843): pid=22719 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258353 res=1
type=USER_START msg=audit(1674672301.868:4252844): pid=22718 uid=0 auid=0 ses=258352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674672301.872:4252845): pid=22719 uid=0 auid=1055 ses=258353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672301.873:4252846): pid=22719 uid=0 auid=1055 ses=258353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672301.873:4252847): pid=22718 uid=0 auid=0 ses=258352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672302.226:4252848): pid=22719 uid=0 auid=1055 ses=258353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672302.230:4252849): pid=22719 uid=0 auid=1055 ses=258353 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672305.308:4252850): pid=22718 uid=0 auid=0 ses=258352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672305.310:4252851): pid=22718 uid=0 auid=0 ses=258352 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672361.328:4252852): pid=22930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672361.328:4252853): pid=22930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672361.329:4252854): pid=22930 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258354 res=1
type=USER_START msg=audit(1674672361.345:4252855): pid=22930 uid=0 auid=1055 ses=258354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672361.347:4252856): pid=22930 uid=0 auid=1055 ses=258354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672361.622:4252857): pid=22930 uid=0 auid=1055 ses=258354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672361.624:4252858): pid=22930 uid=0 auid=1055 ses=258354 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674672386.849:4252859): avc: denied { read } for pid=23024 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674672386.849:4252859): avc: denied { open } for pid=23024 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672386.849:4252859): arch=c000003e syscall=2 success=yes exit=18 a0=55e2e6aa4f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=23024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672386.849:4252859): proctitle="dovecot/auth"
type=AVC msg=audit(1674672386.849:4252860): avc: denied { getattr } for pid=23024 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672386.849:4252860): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcb44ebb10 a2=7ffcb44ebb10 a3=fffffc00 items=0 ppid=5547 pid=23024 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672386.849:4252860): proctitle="dovecot/auth"
type=AVC msg=audit(1674672388.489:4252861): avc: denied { name_connect } for pid=23024 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674672388.489:4252861): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcb44eb900 a2=10 a3=7ffcb44eb8fc items=0 ppid=5547 pid=23024 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672388.489:4252861): proctitle="dovecot/auth"
type=AVC msg=audit(1674672388.525:4252862): avc: denied { write } for pid=23029 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674672388.525:4252862): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc75844e60 a2=6e a3=63d17904 items=0 ppid=5547 pid=23029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672388.525:4252862): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674672397.963:4252863): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674672397.963:4252863): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b63943d6010 items=0 ppid=23058 pid=23065 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672397.963:4252863): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132302E3133332E37302E34002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543138
type=USER_ACCT msg=audit(1674672421.643:4252864): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672421.643:4252865): pid=23138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672421.644:4252866): pid=23138 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258355 res=1
type=USER_START msg=audit(1674672421.667:4252867): pid=23138 uid=0 auid=1055 ses=258355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672421.668:4252868): pid=23138 uid=0 auid=1055 ses=258355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672421.947:4252869): pid=23138 uid=0 auid=1055 ses=258355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672421.949:4252870): pid=23138 uid=0 auid=1055 ses=258355 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674672448.749:4252871): avc: denied { name_connect } for pid=23024 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674672448.749:4252871): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcb44eb900 a2=10 a3=7ffcb44eb8fc items=0 ppid=5547 pid=23024 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672448.749:4252871): proctitle="dovecot/auth"
type=AVC msg=audit(1674672448.780:4252872): avc: denied { write } for pid=23284 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674672448.780:4252872): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffda86bb1a0 a2=6e a3=63d17940 items=0 ppid=5547 pid=23284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672448.780:4252872): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674672481.965:4252873): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672481.965:4252874): pid=23438 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672481.966:4252875): pid=23438 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258356 res=1
type=USER_START msg=audit(1674672481.981:4252876): pid=23438 uid=0 auid=1055 ses=258356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672481.983:4252877): pid=23438 uid=0 auid=1055 ses=258356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672482.271:4252878): pid=23438 uid=0 auid=1055 ses=258356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672482.275:4252879): pid=23438 uid=0 auid=1055 ses=258356 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672541.289:4252880): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672541.290:4252881): pid=23632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672541.290:4252882): pid=23632 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258357 res=1
type=USER_START msg=audit(1674672541.302:4252883): pid=23632 uid=0 auid=1055 ses=258357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672541.303:4252884): pid=23632 uid=0 auid=1055 ses=258357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672541.530:4252885): pid=23632 uid=0 auid=1055 ses=258357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672541.532:4252886): pid=23632 uid=0 auid=1055 ses=258357 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674672544.183:4252887): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674672544.183:4252887): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b01db701010 items=0 ppid=23650 pid=23655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672544.183:4252887): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650033362E372E3133372E313039002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543138
type=USER_ACCT msg=audit(1674672601.567:4252888): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672601.567:4252889): pid=23829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672601.567:4252890): pid=23830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672601.567:4252891): pid=23829 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258358 res=1
type=CRED_ACQ msg=audit(1674672601.567:4252892): pid=23830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672601.567:4252893): pid=23830 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258359 res=1
type=USER_ACCT msg=audit(1674672601.567:4252894): pid=23831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672601.567:4252895): pid=23831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672601.567:4252896): pid=23831 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258360 res=1
type=USER_ACCT msg=audit(1674672601.586:4252897): pid=23832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672601.586:4252898): pid=23832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672601.586:4252899): pid=23832 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258361 res=1
type=USER_START msg=audit(1674672601.733:4252900): pid=23830 uid=0 auid=0 ses=258359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674672601.733:4252901): pid=23829 uid=0 auid=0 ses=258358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674672601.733:4252902): pid=23832 uid=0 auid=1055 ses=258361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674672601.736:4252903): pid=23831 uid=0 auid=0 ses=258360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672601.740:4252905): pid=23830 uid=0 auid=0 ses=258359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672601.740:4252904): pid=23831 uid=0 auid=0 ses=258360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672601.740:4252906): pid=23829 uid=0 auid=0 ses=258358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672601.769:4252907): pid=23832 uid=0 auid=1055 ses=258361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672601.827:4252908): pid=23829 uid=0 auid=0 ses=258358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672601.839:4252909): pid=23829 uid=0 auid=0 ses=258358 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672601.905:4252910): pid=23831 uid=0 auid=0 ses=258360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672601.917:4252911): pid=23831 uid=0 auid=0 ses=258360 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672602.342:4252912): pid=23832 uid=0 auid=1055 ses=258361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672602.354:4252913): pid=23832 uid=0 auid=1055 ses=258361 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672605.293:4252914): pid=23830 uid=0 auid=0 ses=258359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672605.295:4252915): pid=23830 uid=0 auid=0 ses=258359 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674672640.941:4252916): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672640.941:4252917): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672640.941:4252918): pid=23986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672641.363:4252919): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23986 suid=74 rport=39436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672641.364:4252920): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23986 suid=74 rport=39436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=USER_AUTH msg=audit(1674672642.781:4252921): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=186.234.231.67 addr=186.234.231.67 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672644.639:4252922): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672644.980:4252923): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23986 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672644.980:4252924): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23986 suid=74 rport=39436 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672644.982:4252925): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672644.982:4252926): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672644.982:4252927): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23985 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672644.982:4252928): pid=23985 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674672661.313:4252929): pid=24050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672661.313:4252930): pid=24050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672661.314:4252931): pid=24050 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258362 res=1
type=USER_START msg=audit(1674672661.334:4252932): pid=24050 uid=0 auid=1055 ses=258362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672661.336:4252933): pid=24050 uid=0 auid=1055 ses=258362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672661.629:4252934): pid=24050 uid=0 auid=1055 ses=258362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672661.631:4252935): pid=24050 uid=0 auid=1055 ses=258362 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674672688.746:4252936): pid=24150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672688.746:4252937): pid=24150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672688.746:4252938): pid=24150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24150 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672688.795:4252939): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24150 suid=74 rport=36500 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672688.795:4252940): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24150 suid=74 rport=36500 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=? res=success'
type=USER_AUTH msg=audit(1674672689.133:4252941): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=178.128.88.244 addr=178.128.88.244 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672690.775:4252942): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672690.824:4252943): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24150 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672690.824:4252944): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24150 suid=74 rport=36500 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672690.826:4252945): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672690.826:4252946): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672690.826:4252947): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24149 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672690.826:4252948): pid=24149 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674672721.647:4252949): pid=24244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672721.647:4252950): pid=24244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672721.648:4252951): pid=24244 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258363 res=1
type=USER_START msg=audit(1674672721.661:4252952): pid=24244 uid=0 auid=1055 ses=258363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672721.663:4252953): pid=24244 uid=0 auid=1055 ses=258363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672721.929:4252954): pid=24244 uid=0 auid=1055 ses=258363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672721.932:4252955): pid=24244 uid=0 auid=1055 ses=258363 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674672729.087:4252956): pid=24274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24274 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672729.087:4252957): pid=24274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24274 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672729.087:4252958): pid=24274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24274 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672729.160:4252959): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24274 suid=74 rport=56494 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672729.160:4252960): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24274 suid=74 rport=56494 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=? res=success'
type=USER_AUTH msg=audit(1674672729.557:4252961): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.154.85.206 addr=43.154.85.206 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672731.690:4252962): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672731.768:4252963): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24274 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672731.768:4252964): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24274 suid=74 rport=56494 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672731.769:4252965): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672731.769:4252966): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672731.769:4252967): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24273 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672731.770:4252968): pid=24273 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=ssh res=failed'
type=AVC msg=audit(1674672746.501:4252969): avc: denied { read } for pid=24335 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674672746.501:4252969): avc: denied { open } for pid=24335 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672746.501:4252969): arch=c000003e syscall=2 success=yes exit=18 a0=55c4592a8f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=24335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672746.501:4252969): proctitle="dovecot/auth"
type=AVC msg=audit(1674672746.501:4252970): avc: denied { getattr } for pid=24335 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672746.501:4252970): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffef55e1aa0 a2=7ffef55e1aa0 a3=fffffc00 items=0 ppid=5547 pid=24335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672746.501:4252970): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674672748.004:4252971): pid=24341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672748.004:4252972): pid=24341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672748.004:4252973): pid=24341 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24341 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672748.214:4252974): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=24341 suid=74 rport=44886 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.35.40.76 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672748.214:4252975): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=24341 suid=74 rport=44886 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.35.40.76 terminal=? res=success'
type=USER_AUTH msg=audit(1674672750.138:4252976): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=114.35.40.76 addr=114.35.40.76 terminal=ssh res=failed'
type=AVC msg=audit(1674672751.720:4252977): avc: denied { name_connect } for pid=24335 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674672751.720:4252977): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffef55e1890 a2=10 a3=7ffef55e188c items=0 ppid=5547 pid=24335 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672751.720:4252977): proctitle="dovecot/auth"
type=AVC msg=audit(1674672751.749:4252978): avc: denied { write } for pid=24352 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674672751.749:4252978): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc0b45d9e0 a2=6e a3=63d17a6f items=0 ppid=5547 pid=24352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672751.749:4252978): proctitle=646F7665636F742F61757468002D77
type=USER_AUTH msg=audit(1674672752.156:4252979): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.35.40.76 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672752.893:4252980): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24341 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672752.893:4252981): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24341 suid=74 rport=44886 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.35.40.76 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672752.895:4252982): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672752.895:4252983): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672752.895:4252984): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24339 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672752.895:4252985): pid=24339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.35.40.76 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672757.474:4252986): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672757.474:4252987): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672757.474:4252988): pid=24467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24467 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1674672781.850:4252989): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674672781.850:4252989): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ac36c369010 items=0 ppid=24549 pid=24555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672781.850:4252989): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F7572636500312E3230322E3136312E3530002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543138
type=USER_ACCT msg=audit(1674672781.955:4252990): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672781.955:4252991): pid=24556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672781.956:4252992): pid=24556 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258364 res=1
type=USER_START msg=audit(1674672781.980:4252993): pid=24556 uid=0 auid=1055 ses=258364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672781.983:4252994): pid=24556 uid=0 auid=1055 ses=258364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672782.266:4252995): pid=24556 uid=0 auid=1055 ses=258364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672782.268:4252996): pid=24556 uid=0 auid=1055 ses=258364 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674672784.889:4252997): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674672784.889:4252997): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b169e700010 items=0 ppid=24572 pid=24577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672784.889:4252997): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3133382E35372E313437002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674672841.283:4252998): pid=24750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672841.283:4252999): pid=24750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672841.283:4253000): pid=24750 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258365 res=1
type=USER_START msg=audit(1674672841.296:4253001): pid=24750 uid=0 auid=1055 ses=258365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672841.298:4253002): pid=24750 uid=0 auid=1055 ses=258365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672841.563:4253003): pid=24750 uid=0 auid=1055 ses=258365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672841.565:4253004): pid=24750 uid=0 auid=1055 ses=258365 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674672845.249:4253005): pid=24773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672845.249:4253006): pid=24773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672845.249:4253007): pid=24773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24773 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672845.482:4253008): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24773 suid=74 rport=53956 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672845.483:4253009): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24773 suid=74 rport=53956 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=USER_AUTH msg=audit(1674672846.516:4253010): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=178.217.173.54 addr=178.217.173.54 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672848.044:4253011): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672848.279:4253012): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24773 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672848.279:4253013): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24773 suid=74 rport=53956 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672848.281:4253014): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672848.281:4253015): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672848.281:4253016): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24772 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672848.281:4253017): pid=24772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672851.810:4253018): pid=24793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672851.810:4253019): pid=24793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672851.810:4253020): pid=24793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24793 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672851.811:4253021): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24793 suid=74 rport=48038 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672851.811:4253022): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24793 suid=74 rport=48038 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=USER_AUTH msg=audit(1674672851.865:4253023): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=165.232.185.4 addr=165.232.185.4 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672853.748:4253024): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672853.748:4253025): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24793 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672853.748:4253026): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24793 suid=74 rport=48038 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672853.749:4253027): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672853.750:4253028): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672853.750:4253029): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672853.750:4253030): pid=24791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672882.723:4253031): pid=24892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672882.723:4253032): pid=24892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672882.723:4253033): pid=24892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24892 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672882.758:4253034): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24892 suid=74 rport=29082 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672882.758:4253035): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24892 suid=74 rport=29082 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=? res=success'
type=USER_AUTH msg=audit(1674672883.005:4253036): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=182.156.1.58 addr=182.156.1.58 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672884.948:4253037): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672884.987:4253038): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24892 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672884.987:4253039): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24892 suid=74 rport=29082 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672884.988:4253040): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672884.988:4253041): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672884.988:4253042): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24891 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672884.988:4253043): pid=24891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674672901.582:4253044): pid=24969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674672901.582:4253045): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672901.582:4253046): pid=24969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672901.582:4253047): pid=24970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672901.583:4253048): pid=24969 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258366 res=1
type=LOGIN msg=audit(1674672901.583:4253049): pid=24970 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258367 res=1
type=USER_START msg=audit(1674672901.614:4253050): pid=24970 uid=0 auid=1055 ses=258367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674672901.615:4253051): pid=24969 uid=0 auid=0 ses=258366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672901.615:4253052): pid=24970 uid=0 auid=1055 ses=258367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672901.616:4253053): pid=24969 uid=0 auid=0 ses=258366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672901.862:4253054): pid=24970 uid=0 auid=1055 ses=258367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672901.866:4253055): pid=24970 uid=0 auid=1055 ses=258367 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672904.976:4253056): pid=24969 uid=0 auid=0 ses=258366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672904.977:4253057): pid=24969 uid=0 auid=0 ses=258366 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674672909.270:4253058): pid=25012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672909.270:4253059): pid=25012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672909.271:4253060): pid=25012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672909.630:4253061): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25012 suid=74 rport=60278 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672909.630:4253062): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25012 suid=74 rport=60278 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=USER_AUTH msg=audit(1674672911.169:4253063): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=187.111.28.131 addr=187.111.28.131 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672913.288:4253064): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672913.650:4253065): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25012 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672913.650:4253066): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25012 suid=74 rport=60278 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672913.651:4253067): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672913.652:4253068): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672913.652:4253069): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25011 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672913.652:4253070): pid=25011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=ssh res=failed'
type=AVC msg=audit(1674672943.060:4253071): avc: denied { read } for pid=25118 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674672943.060:4253071): avc: denied { open } for pid=25118 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672943.060:4253071): arch=c000003e syscall=2 success=yes exit=18 a0=560470f25f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=25118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672943.060:4253071): proctitle="dovecot/auth"
type=AVC msg=audit(1674672943.061:4253072): avc: denied { getattr } for pid=25118 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674672943.061:4253072): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd76e42310 a2=7ffd76e42310 a3=fffffc00 items=0 ppid=5547 pid=25118 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672943.061:4253072): proctitle="dovecot/auth"
type=AVC msg=audit(1674672944.600:4253073): avc: denied { name_connect } for pid=25118 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674672944.600:4253073): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd76e42100 a2=10 a3=7ffd76e420fc items=0 ppid=5547 pid=25118 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672944.600:4253073): proctitle="dovecot/auth"
type=AVC msg=audit(1674672944.628:4253074): avc: denied { write } for pid=25124 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674672944.628:4253074): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe0e37f5e0 a2=6e a3=63d17b30 items=0 ppid=5547 pid=25124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672944.628:4253074): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674672955.113:4253075): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674672955.113:4253075): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab1b60ba010 items=0 ppid=25169 pid=25174 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674672955.113:4253075): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E3231302E31352E3637002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543138
type=USER_ACCT msg=audit(1674672961.997:4253076): pid=25191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674672961.997:4253077): pid=25191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674672961.998:4253078): pid=25191 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258368 res=1
type=USER_START msg=audit(1674672962.015:4253079): pid=25191 uid=0 auid=1055 ses=258368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674672962.018:4253080): pid=25191 uid=0 auid=1055 ses=258368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674672962.247:4253081): pid=25191 uid=0 auid=1055 ses=258368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674672962.249:4253082): pid=25191 uid=0 auid=1055 ses=258368 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674672990.720:4253083): pid=25299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672990.721:4253084): pid=25299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672990.721:4253085): pid=25299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25299 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672990.952:4253086): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25299 suid=74 rport=58552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672990.952:4253087): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25299 suid=74 rport=58552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=USER_AUTH msg=audit(1674672991.973:4253088): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=178.217.173.54 addr=178.217.173.54 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672993.740:4253089): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672993.753:4253090): pid=25309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672993.753:4253091): pid=25309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672993.754:4253092): pid=25309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25309 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672993.893:4253093): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25309 suid=74 rport=53904 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672993.893:4253094): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25309 suid=74 rport=53904 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672993.972:4253095): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25299 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672993.972:4253096): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25299 suid=74 rport=58552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672993.974:4253097): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672993.974:4253098): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672993.974:4253099): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25298 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672993.974:4253100): pid=25298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672994.326:4253101): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=178.128.88.244 addr=178.128.88.244 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674672996.174:4253102): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672996.214:4253103): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25309 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672996.214:4253104): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25309 suid=74 rport=53904 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672996.215:4253105): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672996.216:4253106): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672996.216:4253107): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25308 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674672996.216:4253108): pid=25308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674672996.947:4253109): pid=25317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672996.947:4253110): pid=25317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674672996.947:4253111): pid=25317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672997.272:4253112): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25317 suid=74 rport=33400 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674672997.272:4253113): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25317 suid=74 rport=33400 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=USER_AUTH msg=audit(1674672998.694:4253114): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=186.234.231.67 addr=186.234.231.67 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673000.758:4253115): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673001.085:4253116): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25317 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673001.085:4253117): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25317 suid=74 rport=33400 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673001.086:4253118): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673001.087:4253119): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673001.087:4253120): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25316 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673001.087:4253121): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674673010.147:4253122): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673010.147:4253122): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b4ac87f1010 items=0 ppid=25352 pid=25357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673010.147:4253122): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003230322E35352E3136362E3735002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=CRYPTO_KEY_USER msg=audit(1674673011.452:4253123): pid=25363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673011.453:4253124): pid=25363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673011.453:4253125): pid=25363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673011.528:4253126): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25363 suid=74 rport=49296 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673011.528:4253127): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25363 suid=74 rport=49296 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=? res=success'
type=USER_AUTH msg=audit(1674673011.930:4253128): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.154.85.206 addr=43.154.85.206 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673014.109:4253129): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673014.189:4253130): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25363 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673014.189:4253131): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25363 suid=74 rport=49296 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673014.190:4253132): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673014.191:4253133): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673014.191:4253134): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673014.191:4253135): pid=25362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674673021.266:4253136): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673021.266:4253137): pid=25401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673021.266:4253138): pid=25401 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258369 res=1
type=USER_START msg=audit(1674673021.282:4253139): pid=25401 uid=0 auid=1055 ses=258369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673021.283:4253140): pid=25401 uid=0 auid=1055 ses=258369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673021.576:4253141): pid=25401 uid=0 auid=1055 ses=258369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673021.598:4253142): pid=25401 uid=0 auid=1055 ses=258369 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674673035.571:4253143): pid=25452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673035.572:4253144): pid=25452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673035.572:4253145): pid=25452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25452 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673035.943:4253146): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25452 suid=74 rport=60284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673035.943:4253147): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25452 suid=74 rport=60284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=USER_AUTH msg=audit(1674673037.530:4253148): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=187.111.28.131 addr=187.111.28.131 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673038.947:4253149): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673039.323:4253150): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25452 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673039.323:4253151): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25452 suid=74 rport=60284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673039.325:4253152): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673039.326:4253153): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673039.326:4253154): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25450 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673039.326:4253155): pid=25450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673073.405:4253156): pid=25580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673073.405:4253157): pid=25580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673073.406:4253158): pid=25580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673073.636:4253159): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25580 suid=74 rport=56706 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673073.636:4253160): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25580 suid=74 rport=56706 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=USER_AUTH msg=audit(1674673074.660:4253161): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=178.217.173.54 addr=178.217.173.54 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673076.157:4253162): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673076.390:4253163): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25580 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673076.390:4253164): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25580 suid=74 rport=56706 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673076.391:4253165): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673076.391:4253166): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673076.391:4253167): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673076.391:4253168): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.217.173.54 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674673078.197:4253169): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673078.197:4253169): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9872edd010 items=0 ppid=25596 pid=25599 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673078.197:4253169): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674673078.202:4253170): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673078.202:4253170): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f36d08f1010 items=0 ppid=25596 pid=25600 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673078.202:4253170): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674673078.206:4253171): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673078.206:4253171): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5e7a187010 items=0 ppid=25596 pid=25601 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673078.206:4253171): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674673078.210:4253172): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673078.210:4253172): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f97c953c010 items=0 ppid=25596 pid=25602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673078.210:4253172): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674673078.512:4253173): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673078.512:4253173): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f602863a010 items=0 ppid=25596 pid=25610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673078.512:4253173): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131342E33332E3234312E323031002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673078.518:4253174): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673078.518:4253174): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbb8c5ef010 items=0 ppid=25596 pid=25611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673078.518:4253174): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131342E33332E3234312E323031002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674673078.524:4253175): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674673078.524:4253175): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fccf3c8c010 items=0 ppid=25596 pid=25612 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673078.524:4253175): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003137382E3231372E3137332E3534002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673078.530:4253176): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673078.530:4253176): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4067304010 items=0 ppid=25596 pid=25613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673078.530:4253176): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003137382E3231372E3137332E3534002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674673079.494:4253177): avc: denied { name_connect } for pid=25118 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673079.494:4253177): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd76e42100 a2=10 a3=7ffd76e420fc items=0 ppid=5547 pid=25118 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673079.494:4253177): proctitle="dovecot/auth"
type=AVC msg=audit(1674673079.525:4253178): avc: denied { write } for pid=25670 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673079.525:4253178): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff8aaf5f70 a2=6e a3=63d17bb7 items=0 ppid=5547 pid=25670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673079.525:4253178): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674673081.584:4253179): pid=25690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673081.584:4253180): pid=25690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673081.584:4253181): pid=25690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25690 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674673081.620:4253182): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673081.620:4253183): pid=25692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673081.620:4253184): pid=25691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673081.620:4253185): pid=25692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673081.621:4253186): pid=25691 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258370 res=1
type=LOGIN msg=audit(1674673081.621:4253187): pid=25692 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258371 res=1
type=CRYPTO_SESSION msg=audit(1674673081.642:4253188): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25690 suid=74 rport=58028 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673081.642:4253189): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25690 suid=74 rport=58028 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=? res=success'
type=USER_START msg=audit(1674673081.665:4253190): pid=25692 uid=0 auid=1055 ses=258371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673081.666:4253191): pid=25691 uid=0 auid=0 ses=258370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673081.669:4253192): pid=25691 uid=0 auid=0 ses=258370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673081.669:4253193): pid=25692 uid=0 auid=1055 ses=258371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673081.758:4253194): pid=25691 uid=0 auid=0 ses=258370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673081.767:4253195): pid=25691 uid=0 auid=0 ses=258370 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674673081.819:4253196): avc: denied { write } for pid=25670 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673081.819:4253196): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff8aaf5f70 a2=6e a3=63d17bb9 items=0 ppid=5547 pid=25670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673081.819:4253196): proctitle=646F7665636F742F61757468002D77
type=USER_AUTH msg=audit(1674673081.960:4253197): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=178.128.88.244 addr=178.128.88.244 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674673082.004:4253198): pid=25692 uid=0 auid=1055 ses=258371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673082.015:4253199): pid=25692 uid=0 auid=1055 ses=258371 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674673083.069:4253200): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673083.069:4253200): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9c3b395010 items=0 ppid=25754 pid=25758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673083.069:4253200): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674673083.074:4253201): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673083.074:4253201): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efe95637010 items=0 ppid=25754 pid=25759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673083.074:4253201): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674673083.078:4253202): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673083.078:4253202): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f51d23b1010 items=0 ppid=25754 pid=25760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673083.078:4253202): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674673083.082:4253203): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673083.082:4253203): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdf4bbc4010 items=0 ppid=25754 pid=25761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673083.082:4253203): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674673083.387:4253204): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673083.387:4253204): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8f86671010 items=0 ppid=25754 pid=25771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673083.387:4253204): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232312E3134382E34352E313638002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673083.393:4253205): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673083.393:4253205): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa7eedfd010 items=0 ppid=25754 pid=25772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673083.393:4253205): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232312E3134382E34352E313638002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674673083.398:4253206): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674673083.398:4253206): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb7b495a010 items=0 ppid=25754 pid=25773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673083.398:4253206): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003137382E3132382E38382E323434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673083.404:4253207): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673083.404:4253207): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1e73b15010 items=0 ppid=25754 pid=25774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673083.404:4253207): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003137382E3132382E38382E323434002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674673084.085:4253208): pid=25689 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=178.128.88.244 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673087.867:4253209): pid=25792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673087.867:4253210): pid=25792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673087.867:4253211): pid=25792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25792 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673088.189:4253212): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25792 suid=74 rport=43402 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673088.189:4253213): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25792 suid=74 rport=43402 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=USER_AUTH msg=audit(1674673089.751:4253214): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=186.234.231.67 addr=186.234.231.67 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673092.179:4253215): pid=25804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673092.179:4253216): pid=25804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673092.179:4253217): pid=25804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25804 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673092.257:4253218): pid=25803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25804 suid=74 rport=47668 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673092.257:4253219): pid=25803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25804 suid=74 rport=47668 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=? res=success'
type=USER_AUTH msg=audit(1674673092.307:4253220): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673092.631:4253221): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25792 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673092.631:4253222): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25792 suid=74 rport=43402 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673092.632:4253223): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673092.632:4253224): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673092.632:4253225): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25791 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673092.632:4253226): pid=25791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=186.234.231.67 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673092.657:4253227): pid=25803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.154.85.206 addr=43.154.85.206 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674673093.043:4253228): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673093.043:4253228): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff300a76010 items=0 ppid=25815 pid=25819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.043:4253228): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674673093.047:4253229): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673093.047:4253229): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff913811010 items=0 ppid=25815 pid=25820 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.047:4253229): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674673093.051:4253230): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673093.051:4253230): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5b0afc0010 items=0 ppid=25815 pid=25822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.051:4253230): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674673093.056:4253231): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673093.056:4253231): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff8ecb64010 items=0 ppid=25815 pid=25824 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.056:4253231): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674673093.058:4253232): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673093.058:4253232): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb234f53010 items=0 ppid=25816 pid=25825 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.058:4253232): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674673093.063:4253233): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673093.063:4253233): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ffa39770010 items=0 ppid=25816 pid=25828 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.063:4253233): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674673093.068:4253234): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673093.068:4253234): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb46cfbb010 items=0 ppid=25816 pid=25830 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.068:4253234): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674673093.073:4253235): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673093.073:4253235): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa3f194d010 items=0 ppid=25816 pid=25832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.073:4253235): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674673093.360:4253236): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673093.360:4253236): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe3f2a43010 items=0 ppid=25815 pid=25844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.360:4253236): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003133392E35392E37312E3531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673093.365:4253237): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673093.365:4253237): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff508a82010 items=0 ppid=25815 pid=25845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.365:4253237): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003133392E35392E37312E3531002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674673093.371:4253238): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674673093.371:4253238): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdd849b7010 items=0 ppid=25815 pid=25846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.371:4253238): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138362E3233342E3233312E3637002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673093.376:4253239): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673093.376:4253239): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1b7b1c8010 items=0 ppid=25815 pid=25847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.376:4253239): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138362E3233342E3233312E3637002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674673093.412:4253240): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673093.412:4253240): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9679210010 items=0 ppid=25816 pid=25851 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.412:4253240): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232302E3133352E3139312E323137002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673093.417:4253241): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673093.417:4253241): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f125d176010 items=0 ppid=25816 pid=25852 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.417:4253241): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232302E3133352E3139312E323137002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674673093.424:4253242): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674673093.424:4253242): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa3fdb40010 items=0 ppid=25816 pid=25853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.424:4253242): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034332E3135342E38352E323036002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673093.430:4253243): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673093.430:4253243): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe21e9c9010 items=0 ppid=25816 pid=25854 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673093.430:4253243): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034332E3135342E38352E323036002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674673094.626:4253244): pid=25803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.154.85.206 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673095.484:4253245): pid=25870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673095.484:4253246): pid=25870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673095.484:4253247): pid=25870 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25870 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673095.518:4253248): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25870 suid=74 rport=12246 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673095.518:4253249): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25870 suid=74 rport=12246 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=? res=success'
type=USER_AUTH msg=audit(1674673095.756:4253250): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=182.156.1.58 addr=182.156.1.58 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673097.469:4253251): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673097.506:4253252): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25870 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673097.506:4253253): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25870 suid=74 rport=12246 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673097.508:4253254): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673097.508:4253255): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673097.508:4253256): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25869 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673097.508:4253257): pid=25869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=ssh res=failed'
type=AVC msg=audit(1674673110.738:4253258): avc: denied { name_connect } for pid=25118 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673110.738:4253258): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd76e42100 a2=10 a3=7ffd76e420fc items=0 ppid=5547 pid=25118 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673110.738:4253258): proctitle="dovecot/auth"
type=AVC msg=audit(1674673111.217:4253259): avc: denied { read append } for pid=25933 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674673111.217:4253259): avc: denied { open } for pid=25933 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674673111.217:4253259): arch=c000003e syscall=2 success=yes exit=8 a0=5565b6a03a60 a1=402 a2=7ffc254d9700 a3=7ffc254d91a0 items=0 ppid=5547 pid=25933 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673111.217:4253259): proctitle="dovecot/imap"
type=AVC msg=audit(1674673111.218:4253260): avc: denied { getattr } for pid=25933 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674673111.218:4253260): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc254d9660 a2=7ffc254d9660 a3=7ffc254d90e0 items=0 ppid=5547 pid=25933 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673111.218:4253260): proctitle="dovecot/imap"
type=AVC msg=audit(1674673111.218:4253261): avc: denied { write } for pid=25933 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674673111.218:4253261): arch=c000003e syscall=2 success=yes exit=10 a0=5565b6a08990 a1=2 a2=7ffc254d9400 a3=7ffc254d8ea0 items=0 ppid=5547 pid=25933 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673111.218:4253261): proctitle="dovecot/imap"
type=AVC msg=audit(1674673111.218:4253262): avc: denied { lock } for pid=25933 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674673111.218:4253262): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc254d9300 a3=63d17bd7 items=0 ppid=5547 pid=25933 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673111.218:4253262): proctitle="dovecot/imap"
type=AVC msg=audit(1674673111.218:4253263): avc: denied { read } for pid=25933 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674673111.218:4253263): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5565b6a31300 a2=90800 a3=0 items=0 ppid=5547 pid=25933 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673111.218:4253263): proctitle="dovecot/imap"
type=AVC msg=audit(1674673111.219:4253264): avc: denied { getattr } for pid=25933 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674673111.219:4253264): arch=c000003e syscall=4 success=yes exit=0 a0=5565b69f3a60 a1=7ffc254d96b0 a2=7ffc254d96b0 a3=6f632e6f72676173 items=0 ppid=5547 pid=25933 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673111.219:4253264): proctitle="dovecot/imap"
type=AVC msg=audit(1674673112.907:4253265): avc: denied { write } for pid=25941 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674673112.907:4253265): arch=c000003e syscall=21 success=yes exit=0 a0=5565575f94c0 a1=2 a2=7b48 a3=7fff08eb1c20 items=0 ppid=5547 pid=25941 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673112.907:4253265): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674673131.004:4253266): pid=25987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673131.005:4253267): pid=25987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673131.005:4253268): pid=25987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673131.370:4253269): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25987 suid=74 rport=60286 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673131.370:4253270): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25987 suid=74 rport=60286 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=USER_AUTH msg=audit(1674673132.934:4253271): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=187.111.28.131 addr=187.111.28.131 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673135.058:4253272): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673135.428:4253273): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25987 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673135.428:4253274): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25987 suid=74 rport=60286 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673135.430:4253275): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673135.430:4253276): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673135.430:4253277): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673135.430:4253278): pid=25986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=187.111.28.131 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674673138.077:4253279): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673138.077:4253279): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0226784010 items=0 ppid=26016 pid=26019 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673138.077:4253279): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674673138.082:4253280): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673138.082:4253280): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2359efc010 items=0 ppid=26016 pid=26020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673138.082:4253280): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674673138.086:4253281): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673138.086:4253281): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9f54da7010 items=0 ppid=26016 pid=26021 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673138.086:4253281): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674673138.090:4253282): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673138.090:4253282): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3483f54010 items=0 ppid=26016 pid=26022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673138.090:4253282): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674673138.387:4253283): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673138.387:4253283): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc5a7e5c010 items=0 ppid=26016 pid=26032 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673138.387:4253283): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232312E3136302E34312E323337002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673138.394:4253284): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673138.394:4253284): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7412077010 items=0 ppid=26016 pid=26033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673138.394:4253284): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232312E3136302E34312E323337002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674673138.399:4253285): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674673138.399:4253285): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efe99bf1010 items=0 ppid=26016 pid=26034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673138.399:4253285): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138372E3131312E32382E313331002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673138.404:4253286): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673138.404:4253286): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc4e9925010 items=0 ppid=26016 pid=26035 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673138.404:4253286): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138372E3131312E32382E313331002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674673141.037:4253287): pid=26048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673141.037:4253288): pid=26048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673141.039:4253289): pid=26048 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258372 res=1
type=USER_START msg=audit(1674673141.060:4253290): pid=26048 uid=0 auid=1055 ses=258372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673141.062:4253291): pid=26048 uid=0 auid=1055 ses=258372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673141.347:4253292): pid=26048 uid=0 auid=1055 ses=258372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673141.350:4253293): pid=26048 uid=0 auid=1055 ses=258372 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674673145.809:4253294): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673145.809:4253295): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673145.809:4253296): pid=26072 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26072 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673145.811:4253297): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26072 suid=74 rport=60640 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673145.812:4253298): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26072 suid=74 rport=60640 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=USER_AUTH msg=audit(1674673145.868:4253299): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=165.232.185.4 addr=165.232.185.4 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673147.109:4253300): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673147.111:4253301): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26072 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673147.111:4253302): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26072 suid=74 rport=60640 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673147.112:4253303): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673147.112:4253304): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673147.112:4253305): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26071 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673147.112:4253306): pid=26071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674673201.371:4253307): pid=26241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673201.371:4253308): pid=26243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673201.371:4253309): pid=26242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673201.371:4253310): pid=26242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673201.371:4253311): pid=26243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673201.371:4253312): pid=26241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673201.371:4253313): pid=26243 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258373 res=1
type=LOGIN msg=audit(1674673201.371:4253314): pid=26242 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258374 res=1
type=LOGIN msg=audit(1674673201.372:4253315): pid=26241 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258375 res=1
type=USER_START msg=audit(1674673201.456:4253316): pid=26243 uid=0 auid=1055 ses=258373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673201.458:4253317): pid=26242 uid=0 auid=0 ses=258374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673201.458:4253318): pid=26241 uid=0 auid=0 ses=258375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673201.459:4253319): pid=26243 uid=0 auid=1055 ses=258373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673201.459:4253320): pid=26242 uid=0 auid=0 ses=258374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673201.459:4253321): pid=26241 uid=0 auid=0 ses=258375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673201.501:4253322): pid=26241 uid=0 auid=0 ses=258375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673201.517:4253323): pid=26241 uid=0 auid=0 ses=258375 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673201.850:4253324): pid=26243 uid=0 auid=1055 ses=258373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673201.853:4253325): pid=26243 uid=0 auid=1055 ses=258373 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674673202.020:4253326): pid=26271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673202.020:4253327): pid=26271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673202.020:4253328): pid=26271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26271 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673202.057:4253329): pid=26270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26271 suid=74 rport=51467 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673202.057:4253330): pid=26270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26271 suid=74 rport=51467 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=? res=success'
type=USER_AUTH msg=audit(1674673202.318:4253331): pid=26270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=182.156.1.58 addr=182.156.1.58 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674673203.245:4253332): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673203.245:4253332): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa9f385f010 items=0 ppid=26283 pid=26287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673203.245:4253332): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674673203.251:4253333): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673203.251:4253333): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f29c581f010 items=0 ppid=26283 pid=26288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673203.251:4253333): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674673203.257:4253334): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673203.257:4253334): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f476c22e010 items=0 ppid=26283 pid=26289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673203.257:4253334): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674673203.263:4253335): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673203.263:4253335): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fec70418010 items=0 ppid=26283 pid=26290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673203.263:4253335): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674673203.650:4253336): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673203.650:4253336): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f897ab08010 items=0 ppid=26283 pid=26298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673203.650:4253336): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730036322E3231392E3135342E313438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673203.667:4253337): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673203.667:4253337): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1705124010 items=0 ppid=26283 pid=26301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673203.667:4253337): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640036322E3231392E3135342E313438002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674673203.676:4253338): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674673203.676:4253338): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc60561e010 items=0 ppid=26283 pid=26302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673203.676:4253338): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138322E3135362E312E3538002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673203.684:4253339): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673203.684:4253339): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcf9f7a9010 items=0 ppid=26283 pid=26303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673203.684:4253339): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138322E3135362E312E3538002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674673204.387:4253340): pid=26270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=182.156.1.58 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674673204.949:4253341): pid=26242 uid=0 auid=0 ses=258374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673204.953:4253342): pid=26242 uid=0 auid=0 ses=258374 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674673207.343:4253343): avc: denied { name_connect } for pid=25118 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673207.343:4253343): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd76e42100 a2=10 a3=7ffd76e420fc items=0 ppid=5547 pid=25118 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673207.343:4253343): proctitle="dovecot/auth"
type=AVC msg=audit(1674673207.382:4253344): avc: denied { write } for pid=26324 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673207.382:4253344): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd188bf0e0 a2=6e a3=63d17c37 items=0 ppid=5547 pid=26324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673207.382:4253344): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674673223.606:4253345): avc: denied { write } for pid=26324 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673223.606:4253345): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd188bf0e0 a2=6e a3=63d17c47 items=0 ppid=5547 pid=26324 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673223.606:4253345): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674673260.619:4253346): avc: denied { name_connect } for pid=25118 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673260.619:4253346): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd76e42100 a2=10 a3=7ffd76e420fc items=0 ppid=5547 pid=25118 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673260.619:4253346): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674673261.733:4253347): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673261.733:4253347): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aae83d8a010 items=0 ppid=26508 pid=26513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673261.733:4253347): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138332E3132392E3230382E3832002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674673261.972:4253348): pid=26514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673261.972:4253349): pid=26515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673261.972:4253350): pid=26514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673261.972:4253351): pid=26515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673261.973:4253352): pid=26514 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258376 res=1
type=LOGIN msg=audit(1674673261.973:4253353): pid=26515 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258377 res=1
type=USER_START msg=audit(1674673262.012:4253354): pid=26515 uid=0 auid=1055 ses=258377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673262.013:4253355): pid=26514 uid=0 auid=0 ses=258376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673262.015:4253356): pid=26515 uid=0 auid=1055 ses=258377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673262.015:4253357): pid=26514 uid=0 auid=0 ses=258376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673262.046:4253358): pid=26514 uid=0 auid=0 ses=258376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673262.049:4253359): pid=26514 uid=0 auid=0 ses=258376 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673262.368:4253360): pid=26515 uid=0 auid=1055 ses=258377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673262.369:4253361): pid=26515 uid=0 auid=1055 ses=258377 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674673265.610:4253362): pid=26551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673265.610:4253363): pid=26551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673265.611:4253364): pid=26551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26551 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673265.613:4253365): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26551 suid=74 rport=59030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674673265.613:4253366): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26551 suid=74 rport=59030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=USER_AUTH msg=audit(1674673265.671:4253367): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=165.232.185.4 addr=165.232.185.4 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674673267.053:4253368): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674673267.053:4253369): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26551 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673267.053:4253370): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26551 suid=74 rport=59030 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673267.054:4253371): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673267.054:4253372): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674673267.054:4253373): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674673267.054:4253374): pid=26550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.232.185.4 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674673268.274:4253375): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674673268.274:4253375): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f30a7197010 items=0 ppid=26565 pid=26568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673268.274:4253375): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674673268.278:4253376): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673268.278:4253376): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f439e7b0010 items=0 ppid=26565 pid=26569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673268.278:4253376): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674673268.283:4253377): table=filter family=2 entries=1065
type=SYSCALL msg=audit(1674673268.283:4253377): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1e37400010 items=0 ppid=26565 pid=26570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673268.283:4253377): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674673268.288:4253378): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673268.288:4253378): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f62a260e010 items=0 ppid=26565 pid=26571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673268.288:4253378): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674673268.589:4253379): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674673268.589:4253379): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f513573c010 items=0 ppid=26565 pid=26579 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673268.589:4253379): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003139352E3232362E3139342E323432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673268.595:4253380): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673268.595:4253380): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f06ad06f010 items=0 ppid=26565 pid=26580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673268.595:4253380): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003139352E3232362E3139342E323432002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674673268.600:4253381): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674673268.600:4253381): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3257d30010 items=0 ppid=26565 pid=26581 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673268.600:4253381): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003136352E3233322E3138352E34002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674673268.605:4253382): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674673268.605:4253382): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fac55ed5010 items=0 ppid=26565 pid=26582 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673268.605:4253382): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003136352E3233322E3138352E34002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674673321.389:4253383): pid=26764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673321.389:4253384): pid=26764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673321.390:4253385): pid=26764 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258378 res=1
type=USER_START msg=audit(1674673321.410:4253386): pid=26764 uid=0 auid=1055 ses=258378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673321.411:4253387): pid=26764 uid=0 auid=1055 ses=258378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673321.756:4253388): pid=26764 uid=0 auid=1055 ses=258378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673321.758:4253389): pid=26764 uid=0 auid=1055 ses=258378 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673381.775:4253390): pid=26961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673381.775:4253391): pid=26961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673381.775:4253392): pid=26961 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258379 res=1
type=USER_START msg=audit(1674673381.790:4253393): pid=26961 uid=0 auid=1055 ses=258379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673381.791:4253394): pid=26961 uid=0 auid=1055 ses=258379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673382.140:4253395): pid=26961 uid=0 auid=1055 ses=258379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673382.150:4253396): pid=26961 uid=0 auid=1055 ses=258379 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674673396.830:4253397): avc: denied { read } for pid=27043 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674673396.830:4253397): avc: denied { open } for pid=27043 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674673396.830:4253397): arch=c000003e syscall=2 success=yes exit=18 a0=55848498cf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=27043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673396.830:4253397): proctitle="dovecot/auth"
type=AVC msg=audit(1674673396.831:4253398): avc: denied { getattr } for pid=27043 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674673396.831:4253398): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff170ecf80 a2=7fff170ecf80 a3=fffffc00 items=0 ppid=5547 pid=27043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673396.831:4253398): proctitle="dovecot/auth"
type=AVC msg=audit(1674673397.342:4253399): avc: denied { name_connect } for pid=27043 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673397.342:4253399): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff170ecd70 a2=10 a3=7fff170ecd6c items=0 ppid=5547 pid=27043 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673397.342:4253399): proctitle="dovecot/auth"
type=AVC msg=audit(1674673397.372:4253400): avc: denied { write } for pid=27072 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673397.372:4253400): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff947f49a0 a2=6e a3=63d17cf5 items=0 ppid=5547 pid=27072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673397.372:4253400): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674673441.169:4253401): pid=27284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673441.170:4253402): pid=27284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673441.170:4253403): pid=27284 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258380 res=1
type=USER_START msg=audit(1674673441.188:4253404): pid=27284 uid=0 auid=1055 ses=258380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673441.190:4253405): pid=27284 uid=0 auid=1055 ses=258380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673441.415:4253406): pid=27284 uid=0 auid=1055 ses=258380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673441.418:4253407): pid=27284 uid=0 auid=1055 ses=258380 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674673499.453:4253408): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674673499.453:4253408): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2ff8d67010 items=0 ppid=27461 pid=27469 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673499.453:4253408): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E3231332E3132322E313330002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674673501.433:4253409): pid=27474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673501.433:4253410): pid=27473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673501.433:4253411): pid=27474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673501.433:4253412): pid=27473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673501.433:4253413): pid=27474 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258381 res=1
type=LOGIN msg=audit(1674673501.433:4253414): pid=27473 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258382 res=1
type=USER_ACCT msg=audit(1674673501.438:4253415): pid=27475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673501.438:4253416): pid=27475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673501.438:4253417): pid=27475 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258383 res=1
type=USER_START msg=audit(1674673501.476:4253418): pid=27474 uid=0 auid=0 ses=258381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673501.476:4253419): pid=27473 uid=0 auid=0 ses=258382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673501.477:4253420): pid=27475 uid=0 auid=1055 ses=258383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673501.477:4253421): pid=27473 uid=0 auid=0 ses=258382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673501.477:4253422): pid=27475 uid=0 auid=1055 ses=258383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673501.477:4253423): pid=27474 uid=0 auid=0 ses=258381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673501.548:4253424): pid=27474 uid=0 auid=0 ses=258381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673501.551:4253425): pid=27474 uid=0 auid=0 ses=258381 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673501.728:4253426): pid=27475 uid=0 auid=1055 ses=258383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673501.731:4253427): pid=27475 uid=0 auid=1055 ses=258383 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673504.798:4253428): pid=27473 uid=0 auid=0 ses=258382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673504.800:4253429): pid=27473 uid=0 auid=0 ses=258382 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673561.818:4253430): pid=27680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673561.819:4253431): pid=27680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673561.820:4253432): pid=27680 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258384 res=1
type=USER_START msg=audit(1674673561.836:4253433): pid=27680 uid=0 auid=1055 ses=258384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673561.838:4253434): pid=27680 uid=0 auid=1055 ses=258384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673562.103:4253435): pid=27680 uid=0 auid=1055 ses=258384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673562.105:4253436): pid=27680 uid=0 auid=1055 ses=258384 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674673589.894:4253437): avc: denied { name_connect } for pid=27043 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673589.894:4253437): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7fff170ecd70 a2=10 a3=7fff170ecd6c items=0 ppid=5547 pid=27043 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673589.894:4253437): proctitle="dovecot/auth"
type=AVC msg=audit(1674673589.931:4253438): avc: denied { write } for pid=27794 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673589.931:4253438): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffa8c12890 a2=6e a3=63d17db5 items=0 ppid=5547 pid=27794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673589.931:4253438): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674673621.119:4253439): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673621.119:4253440): pid=27897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673621.120:4253441): pid=27897 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258385 res=1
type=USER_START msg=audit(1674673621.134:4253442): pid=27897 uid=0 auid=1055 ses=258385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673621.134:4253443): pid=27897 uid=0 auid=1055 ses=258385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673621.470:4253444): pid=27897 uid=0 auid=1055 ses=258385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673621.472:4253445): pid=27897 uid=0 auid=1055 ses=258385 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674673659.096:4253446): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674673659.096:4253446): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2af025f01010 items=0 ppid=28028 pid=28033 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673659.096:4253446): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E32322E31312E313036002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674673665.150:4253447): avc: denied { write } for pid=27794 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673665.150:4253447): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffa8c12890 a2=6e a3=63d17e01 items=0 ppid=5547 pid=27794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673665.150:4253447): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674673681.485:4253448): pid=28101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673681.485:4253449): pid=28101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673681.486:4253450): pid=28101 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258386 res=1
type=USER_START msg=audit(1674673681.495:4253451): pid=28101 uid=0 auid=1055 ses=258386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673681.496:4253452): pid=28101 uid=0 auid=1055 ses=258386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673681.764:4253453): pid=28101 uid=0 auid=1055 ses=258386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673681.766:4253454): pid=28101 uid=0 auid=1055 ses=258386 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674673704.594:4253455): avc: denied { name_connect } for pid=27043 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673704.594:4253455): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff170ecd70 a2=10 a3=7fff170ecd6c items=0 ppid=5547 pid=27043 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673704.594:4253455): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674673741.781:4253456): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673741.781:4253457): pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673741.782:4253458): pid=28378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673741.782:4253459): pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673741.788:4253460): pid=28378 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258387 res=1
type=LOGIN msg=audit(1674673741.788:4253461): pid=28379 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258388 res=1
type=USER_START msg=audit(1674673741.823:4253462): pid=28379 uid=0 auid=1055 ses=258388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673741.824:4253463): pid=28378 uid=0 auid=0 ses=258387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673741.824:4253464): pid=28379 uid=0 auid=1055 ses=258388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673741.826:4253465): pid=28378 uid=0 auid=0 ses=258387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673742.107:4253466): pid=28379 uid=0 auid=1055 ses=258388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673742.109:4253467): pid=28379 uid=0 auid=1055 ses=258388 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673747.163:4253468): pid=28378 uid=0 auid=0 ses=258387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673747.166:4253469): pid=28378 uid=0 auid=0 ses=258387 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673801.183:4253470): pid=28578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673801.183:4253471): pid=28580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673801.183:4253472): pid=28579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673801.184:4253473): pid=28578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673801.184:4253474): pid=28580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673801.184:4253475): pid=28579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673801.184:4253476): pid=28579 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258389 res=1
type=LOGIN msg=audit(1674673801.184:4253478): pid=28580 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258391 res=1
type=LOGIN msg=audit(1674673801.184:4253477): pid=28578 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258390 res=1
type=USER_START msg=audit(1674673801.230:4253480): pid=28578 uid=0 auid=0 ses=258390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673801.230:4253479): pid=28580 uid=0 auid=1055 ses=258391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673801.231:4253481): pid=28579 uid=0 auid=0 ses=258389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673801.232:4253482): pid=28578 uid=0 auid=0 ses=258390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673801.232:4253483): pid=28579 uid=0 auid=0 ses=258389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673801.233:4253484): pid=28580 uid=0 auid=1055 ses=258391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673801.260:4253485): pid=28578 uid=0 auid=0 ses=258390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673801.265:4253486): pid=28578 uid=0 auid=0 ses=258390 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673801.537:4253487): pid=28580 uid=0 auid=1055 ses=258391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673801.546:4253488): pid=28580 uid=0 auid=1055 ses=258391 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673804.575:4253489): pid=28579 uid=0 auid=0 ses=258389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673804.577:4253490): pid=28579 uid=0 auid=0 ses=258389 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674673815.542:4253491): avc: denied { name_connect } for pid=27043 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673815.542:4253491): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff170ecd70 a2=10 a3=7fff170ecd6c items=0 ppid=5547 pid=27043 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673815.542:4253491): proctitle="dovecot/auth"
type=AVC msg=audit(1674673815.576:4253492): avc: denied { write } for pid=28645 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673815.576:4253492): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffd7867500 a2=6e a3=63d17e97 items=0 ppid=5547 pid=28645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673815.576:4253492): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674673835.093:4253493): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674673835.093:4253493): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b390f267010 items=0 ppid=28718 pid=28723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673835.093:4253493): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650032372E39382E3234392E39002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431393A
type=USER_ACCT msg=audit(1674673861.597:4253494): pid=28801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673861.597:4253495): pid=28801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673861.598:4253496): pid=28801 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258392 res=1
type=USER_START msg=audit(1674673861.618:4253497): pid=28801 uid=0 auid=1055 ses=258392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673861.621:4253498): pid=28801 uid=0 auid=1055 ses=258392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673861.899:4253499): pid=28801 uid=0 auid=1055 ses=258392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673861.902:4253500): pid=28801 uid=0 auid=1055 ses=258392 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674673908.396:4253501): avc: denied { name_connect } for pid=27043 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674673908.396:4253501): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff170ecd70 a2=10 a3=7fff170ecd6c items=0 ppid=5547 pid=27043 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673908.396:4253501): proctitle="dovecot/auth"
type=AVC msg=audit(1674673908.427:4253502): avc: denied { write } for pid=28961 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674673908.427:4253502): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcb40eafd0 a2=6e a3=63d17ef4 items=0 ppid=5547 pid=28961 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674673908.427:4253502): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674673921.918:4253503): pid=29003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673921.919:4253504): pid=29003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673921.919:4253505): pid=29003 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258393 res=1
type=USER_START msg=audit(1674673921.934:4253506): pid=29003 uid=0 auid=1055 ses=258393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673921.936:4253507): pid=29003 uid=0 auid=1055 ses=258393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673922.185:4253508): pid=29003 uid=0 auid=1055 ses=258393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673922.187:4253509): pid=29003 uid=0 auid=1055 ses=258393 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673981.202:4253511): pid=29197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674673981.202:4253510): pid=29196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673981.202:4253512): pid=29197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674673981.202:4253513): pid=29196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674673981.203:4253514): pid=29197 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258394 res=1
type=LOGIN msg=audit(1674673981.203:4253515): pid=29196 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258395 res=1
type=USER_START msg=audit(1674673981.236:4253516): pid=29197 uid=0 auid=1055 ses=258394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673981.237:4253517): pid=29197 uid=0 auid=1055 ses=258394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674673981.238:4253518): pid=29196 uid=0 auid=0 ses=258395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674673981.239:4253519): pid=29196 uid=0 auid=0 ses=258395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673981.300:4253520): pid=29196 uid=0 auid=0 ses=258395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673981.301:4253521): pid=29196 uid=0 auid=0 ses=258395 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674673981.535:4253522): pid=29197 uid=0 auid=1055 ses=258394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674673981.537:4253523): pid=29197 uid=0 auid=1055 ses=258394 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674017.797:4253524): avc: denied { read } for pid=29346 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674017.797:4253524): avc: denied { open } for pid=29346 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674017.797:4253524): arch=c000003e syscall=2 success=yes exit=18 a0=5632aaed4f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=29346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674017.797:4253524): proctitle="dovecot/auth"
type=AVC msg=audit(1674674017.797:4253525): avc: denied { getattr } for pid=29346 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674017.797:4253525): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffde79c4330 a2=7ffde79c4330 a3=fffffc00 items=0 ppid=5547 pid=29346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674017.797:4253525): proctitle="dovecot/auth"
type=AVC msg=audit(1674674021.734:4253526): avc: denied { read append } for pid=29424 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674021.734:4253526): avc: denied { open } for pid=29424 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674021.734:4253526): arch=c000003e syscall=2 success=yes exit=8 a0=56067bee9a60 a1=402 a2=7ffead4a4600 a3=7ffead4a40a0 items=0 ppid=5547 pid=29424 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674021.734:4253526): proctitle="dovecot/imap"
type=AVC msg=audit(1674674021.734:4253527): avc: denied { getattr } for pid=29424 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674021.734:4253527): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffead4a4560 a2=7ffead4a4560 a3=7ffead4a3fe0 items=0 ppid=5547 pid=29424 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674021.734:4253527): proctitle="dovecot/imap"
type=AVC msg=audit(1674674021.734:4253528): avc: denied { write } for pid=29424 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674021.734:4253528): arch=c000003e syscall=2 success=yes exit=10 a0=56067beee960 a1=2 a2=7ffead4a4300 a3=7ffead4a3da0 items=0 ppid=5547 pid=29424 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674021.734:4253528): proctitle="dovecot/imap"
type=AVC msg=audit(1674674021.735:4253529): avc: denied { lock } for pid=29424 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674021.735:4253529): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffead4a4200 a3=63d17f65 items=0 ppid=5547 pid=29424 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674021.735:4253529): proctitle="dovecot/imap"
type=AVC msg=audit(1674674021.735:4253530): avc: denied { read } for pid=29424 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674674021.735:4253530): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=56067bf17300 a2=90800 a3=0 items=0 ppid=5547 pid=29424 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674021.735:4253530): proctitle="dovecot/imap"
type=AVC msg=audit(1674674021.736:4253531): avc: denied { getattr } for pid=29424 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674021.736:4253531): arch=c000003e syscall=4 success=yes exit=0 a0=56067bed9a60 a1=7ffead4a45b0 a2=7ffead4a45b0 a3=6f632e6f72676173 items=0 ppid=5547 pid=29424 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674021.736:4253531): proctitle="dovecot/imap"
type=AVC msg=audit(1674674023.489:4253532): avc: denied { write } for pid=29442 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674674023.489:4253532): arch=c000003e syscall=21 success=yes exit=0 a0=563a14f884c0 a1=2 a2=7b48 a3=7ffdf1d8a0e0 items=0 ppid=5547 pid=29442 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674023.489:4253532): proctitle="dovecot/imap"
type=NETFILTER_CFG msg=audit(1674674026.032:4253533): table=filter family=2 entries=1065
type=SYSCALL msg=audit(1674674026.032:4253533): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae3b3b08010 items=0 ppid=29452 pid=29457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674026.032:4253533): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232302E3137392E36312E313630002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674674041.559:4253534): pid=29499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674041.560:4253535): pid=29499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674041.561:4253536): pid=29499 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258396 res=1
type=USER_START msg=audit(1674674041.592:4253537): pid=29499 uid=0 auid=1055 ses=258396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674041.594:4253538): pid=29499 uid=0 auid=1055 ses=258396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674041.922:4253539): pid=29499 uid=0 auid=1055 ses=258396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674041.925:4253540): pid=29499 uid=0 auid=1055 ses=258396 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674042.999:4253541): avc: denied { write } for pid=29375 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674674042.999:4253541): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc0233b120 a2=6e a3=63d17f7b items=0 ppid=5547 pid=29375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674042.999:4253541): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674674088.541:4253542): avc: denied { name_connect } for pid=29346 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674674088.541:4253542): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffde79c4120 a2=10 a3=7ffde79c411c items=0 ppid=5547 pid=29346 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674088.541:4253542): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674674101.940:4253543): pid=29703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674674101.940:4253544): pid=29704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674101.940:4253545): pid=29703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674101.940:4253546): pid=29704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674101.940:4253547): pid=29703 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258397 res=1
type=LOGIN msg=audit(1674674101.940:4253548): pid=29704 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258398 res=1
type=USER_START msg=audit(1674674101.995:4253549): pid=29704 uid=0 auid=1055 ses=258398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674674101.997:4253550): pid=29703 uid=0 auid=0 ses=258397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674101.998:4253551): pid=29704 uid=0 auid=1055 ses=258398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674101.999:4253552): pid=29703 uid=0 auid=0 ses=258397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674102.292:4253553): pid=29704 uid=0 auid=1055 ses=258398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674102.295:4253554): pid=29704 uid=0 auid=1055 ses=258398 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674674104.411:4253555): pid=29726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674104.411:4253556): pid=29726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674104.411:4253557): pid=29726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29726 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674674104.553:4253558): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=29726 suid=74 rport=12385 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674674104.553:4253559): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=29726 suid=74 rport=12385 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRED_DISP msg=audit(1674674105.384:4253560): pid=29703 uid=0 auid=0 ses=258397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674105.386:4253561): pid=29703 uid=0 auid=0 ses=258397 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674674107.335:4253562): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674674109.981:4253563): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674674110.539:4253564): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29726 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674110.539:4253565): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29726 suid=74 rport=12385 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674110.540:4253566): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674110.540:4253567): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674110.540:4253568): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29724 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674674110.540:4253569): pid=29724 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674674132.083:4253570): table=filter family=2 entries=1066
type=SYSCALL msg=audit(1674674132.083:4253570): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b7f65b86010 items=0 ppid=29830 pid=29836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674132.083:4253570): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E32382E3133362E3432002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543139
type=USER_ACCT msg=audit(1674674161.409:4253571): pid=29922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674161.409:4253572): pid=29922 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674161.410:4253573): pid=29922 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258399 res=1
type=USER_START msg=audit(1674674161.427:4253574): pid=29922 uid=0 auid=1055 ses=258399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674161.428:4253575): pid=29922 uid=0 auid=1055 ses=258399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674161.732:4253576): pid=29922 uid=0 auid=1055 ses=258399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674161.735:4253577): pid=29922 uid=0 auid=1055 ses=258399 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674206.313:4253578): avc: denied { read } for pid=30075 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674206.313:4253578): avc: denied { open } for pid=30075 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674206.313:4253578): arch=c000003e syscall=2 success=yes exit=18 a0=5612a4efaf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674206.313:4253578): proctitle="dovecot/auth"
type=AVC msg=audit(1674674206.313:4253579): avc: denied { getattr } for pid=30075 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674206.313:4253579): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffddc3cc3a0 a2=7ffddc3cc3a0 a3=fffffc00 items=0 ppid=5547 pid=30075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674206.313:4253579): proctitle="dovecot/auth"
type=AVC msg=audit(1674674206.329:4253580): avc: denied { write } for pid=30077 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674674206.329:4253580): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffee2460c80 a2=6e a3=63d1801e items=0 ppid=5547 pid=30077 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674206.329:4253580): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674674206.341:4253581): avc: denied { read append } for pid=30074 comm="lmtp" name="maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674206.341:4253581): avc: denied { open } for pid=30074 comm="lmtp" path="/home/wwwtestugo/mail/maildirsize" dev="vda1" ino=47618432 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674206.341:4253581): arch=c000003e syscall=2 success=yes exit=17 a0=559e1aa7ea00 a1=402 a2=7ffca8fdf3e0 a3=fffff800 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674206.341:4253581): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674206.343:4253582): avc: denied { getattr } for pid=30074 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674206.343:4253582): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffca8fe0260 a2=7ffca8fe0260 a3=7ffca8fdfce0 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674206.343:4253582): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674206.343:4253583): avc: denied { write } for pid=30074 comm="lmtp" name="dovecot.index" dev="vda1" ino=47725134 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674206.343:4253583): arch=c000003e syscall=2 success=yes exit=18 a0=559e1aabcbb0 a1=2 a2=7ffca8fe0000 a3=7ffca8fdfaa0 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674206.343:4253583): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674206.786:4253584): avc: denied { read write } for pid=30074 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674206.786:4253584): avc: denied { open } for pid=30074 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674206.786:4253584): arch=c000003e syscall=2 success=yes exit=19 a0=559e1aab2290 a1=2 a2=7ffca8fe0280 a3=7ffca8fdff20 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674206.786:4253584): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674206.786:4253585): avc: denied { getattr } for pid=30074 comm="lmtp" path="/home/wwwtestugo/mail/dovecot-uidlist" dev="vda1" ino=47780297 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674206.786:4253585): arch=c000003e syscall=5 success=yes exit=0 a0=13 a1=7ffca8fe03e0 a2=7ffca8fe03e0 a3=7ffca8fdfde0 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674206.786:4253585): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.246:4253586): avc: denied { write } for pid=30074 comm="lmtp" name="tmp" dev="vda1" ino=134000050 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674674209.246:4253586): avc: denied { add_name } for pid=30074 comm="lmtp" name="1674674206.M343238P30074.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674674209.246:4253586): avc: denied { create } for pid=30074 comm="lmtp" name="1674674206.M343238P30074.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674209.246:4253586): arch=c000003e syscall=2 success=yes exit=21 a0=559e1aa13cb0 a1=2c1 a2=1ff a3=7ffca8fdfea0 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.246:4253586): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.249:4253587): avc: denied { remove_name } for pid=30074 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=48866229 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674674209.249:4253587): avc: denied { unlink } for pid=30074 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=48866229 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674209.249:4253587): arch=c000003e syscall=87 success=yes exit=0 a0=559e1aa13438 a1=7fc420739071 a2=c3 a3=1 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.249:4253587): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.449:4253588): avc: denied { rename } for pid=30074 comm="lmtp" name="1674674206.M343238P30074.host.nexidigital.com" dev="vda1" ino=130847612 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674209.449:4253588): arch=c000003e syscall=82 success=yes exit=0 a0=559e1aa13548 a1=559e1aa13590 a2=6a50 a3=7ffca8fdfe20 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.449:4253588): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.451:4253589): avc: denied { read } for pid=30074 comm="lmtp" name="new" dev="vda1" ino=126223302 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674674209.451:4253589): arch=c000003e syscall=2 success=yes exit=21 a0=559e1aac1490 a1=0 a2=559e1aa13410 a3=7ffca8fdfe20 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.451:4253589): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.452:4253590): avc: denied { lock } for pid=30074 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.index.log" dev="vda1" ino=47725130 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674209.452:4253590): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffca8fe0220 a3=63d18021 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.452:4253590): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.476:4253591): avc: denied { append } for pid=30074 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=47780291 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674209.476:4253591): arch=c000003e syscall=2 success=yes exit=21 a0=559e1ac42210 a1=402 a2=7ffca8fe0310 a3=4 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.476:4253591): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.476:4253592): avc: denied { lock } for pid=30074 comm="lmtp" path="/home/wwwtestugo/mail/dovecot.list.index.log" dev="vda1" ino=47780291 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674209.476:4253592): arch=c000003e syscall=72 success=yes exit=0 a0=15 a1=7 a2=7ffca8fdff10 a3=63d18021 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.476:4253592): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.624:4253593): avc: denied { link } for pid=30074 comm="lmtp" name=".temp.host.nexidigital.com.30074.43d534398137a1c0" dev="vda1" ino=48866229 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674209.624:4253593): arch=c000003e syscall=86 success=yes exit=0 a0=559e1aa14378 a1=559e1aa142e8 a2=1 a3=63d18021 items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.624:4253593): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674209.624:4253594): avc: denied { setattr } for pid=30074 comm="lmtp" name=".temp.host.nexidigital.com.30074.43d534398137a1c0" dev="vda1" ino=48866229 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674209.624:4253594): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=417 a3=3b items=0 ppid=5547 pid=30074 auid=4294967295 uid=0 gid=1047 euid=1045 suid=0 fsuid=1045 egid=1047 sgid=1047 fsgid=1047 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674209.624:4253594): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674674221.751:4253595): pid=30121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674221.752:4253596): pid=30121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674221.753:4253597): pid=30121 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258400 res=1
type=USER_START msg=audit(1674674221.770:4253598): pid=30121 uid=0 auid=1055 ses=258400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674221.771:4253599): pid=30121 uid=0 auid=1055 ses=258400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674222.091:4253600): pid=30121 uid=0 auid=1055 ses=258400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674222.093:4253601): pid=30121 uid=0 auid=1055 ses=258400 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674280.143:4253602): avc: denied { name_connect } for pid=30075 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674674280.143:4253602): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffddc3cc190 a2=10 a3=7ffddc3cc18c items=0 ppid=5547 pid=30075 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674280.143:4253602): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674674281.107:4253603): pid=30309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674281.107:4253604): pid=30309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674281.108:4253605): pid=30309 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258401 res=1
type=USER_START msg=audit(1674674281.124:4253606): pid=30309 uid=0 auid=1055 ses=258401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674281.126:4253607): pid=30309 uid=0 auid=1055 ses=258401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674281.414:4253608): pid=30309 uid=0 auid=1055 ses=258401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674281.415:4253609): pid=30309 uid=0 auid=1055 ses=258401 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674674294.191:4253610): table=filter family=2 entries=1067
type=SYSCALL msg=audit(1674674294.191:4253610): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae44ce8a010 items=0 ppid=30353 pid=30358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674294.191:4253610): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131352E3233362E3136312E3134002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674674341.430:4253611): pid=30501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674341.430:4253612): pid=30501 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674341.430:4253613): pid=30501 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258402 res=1
type=USER_START msg=audit(1674674341.440:4253614): pid=30501 uid=0 auid=1055 ses=258402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674341.441:4253615): pid=30501 uid=0 auid=1055 ses=258402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674341.736:4253616): pid=30501 uid=0 auid=1055 ses=258402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674341.739:4253617): pid=30501 uid=0 auid=1055 ses=258402 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674344.816:4253618): avc: denied { name_connect } for pid=30075 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674674344.816:4253618): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffddc3cc190 a2=10 a3=7ffddc3cc18c items=0 ppid=5547 pid=30075 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674344.816:4253618): proctitle="dovecot/auth"
type=AVC msg=audit(1674674344.845:4253619): avc: denied { write } for pid=30567 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674674344.845:4253619): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe949a1a40 a2=6e a3=63d180a8 items=0 ppid=5547 pid=30567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674344.845:4253619): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674674401.766:4253620): pid=30798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674674401.766:4253621): pid=30797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674401.766:4253622): pid=30798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674401.766:4253623): pid=30797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674401.768:4253624): pid=30798 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258403 res=1
type=LOGIN msg=audit(1674674401.768:4253625): pid=30797 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258404 res=1
type=USER_ACCT msg=audit(1674674401.768:4253626): pid=30799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674401.768:4253627): pid=30799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674401.768:4253628): pid=30799 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258405 res=1
type=USER_ACCT msg=audit(1674674401.787:4253629): pid=30796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674401.800:4253630): pid=30796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674401.800:4253631): pid=30796 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258406 res=1
type=USER_START msg=audit(1674674401.926:4253632): pid=30799 uid=0 auid=1055 ses=258405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674674401.926:4253633): pid=30798 uid=0 auid=0 ses=258403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674674401.936:4253634): pid=30797 uid=0 auid=0 ses=258404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674401.943:4253635): pid=30797 uid=0 auid=0 ses=258404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674401.943:4253636): pid=30798 uid=0 auid=0 ses=258403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674401.943:4253637): pid=30799 uid=0 auid=1055 ses=258405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674674401.961:4253638): pid=30796 uid=0 auid=0 ses=258406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674401.975:4253639): pid=30796 uid=0 auid=0 ses=258406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674402.005:4253640): pid=30796 uid=0 auid=0 ses=258406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674402.016:4253641): pid=30796 uid=0 auid=0 ses=258406 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674402.076:4253642): pid=30798 uid=0 auid=0 ses=258403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674402.093:4253643): pid=30798 uid=0 auid=0 ses=258403 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674402.358:4253644): pid=30799 uid=0 auid=1055 ses=258405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674402.360:4253645): pid=30799 uid=0 auid=1055 ses=258405 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674674404.549:4253646): table=filter family=2 entries=1068
type=SYSCALL msg=audit(1674674404.549:4253646): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4f4113a010 items=0 ppid=1588 pid=30835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.549:4253646): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033392E3135322E32372E3134382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A32333A3137002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.554:4253647): table=filter family=2 entries=1067
type=SYSCALL msg=audit(1674674404.554:4253647): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b7f9dfb6010 items=0 ppid=1588 pid=30836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.554:4253647): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232302E3137392E36312E3136302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A33313A3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.560:4253648): table=filter family=2 entries=1066
type=SYSCALL msg=audit(1674674404.560:4253648): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aca35084010 items=0 ppid=1588 pid=30837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.560:4253648): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132322E3232372E37312E362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A34323A3437002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.565:4253649): table=filter family=2 entries=1065
type=SYSCALL msg=audit(1674674404.565:4253649): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6295184010 items=0 ppid=1588 pid=30838 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.565:4253649): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132302E36382E3230322E3131342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A34373A3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.570:4253650): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674674404.570:4253650): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b3aaa6fb010 items=0 ppid=1588 pid=30839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.570:4253650): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E36322E39312E3133352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A34373A3433002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.575:4253651): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674674404.575:4253651): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aec00192010 items=0 ppid=1588 pid=30840 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.575:4253651): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232302E3136392E3131302E3130312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A34393A3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.580:4253652): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674674404.580:4253652): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2acb2bcb7010 items=0 ppid=1588 pid=30841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.580:4253652): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3137372E3132332E35382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A35313A3036002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.585:4253653): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674674404.585:4253653): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b945e1d5010 items=0 ppid=1588 pid=30842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.585:4253653): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131382E39372E39382E322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A35343A3232002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.590:4253654): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674674404.590:4253654): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b654afeb010 items=0 ppid=1588 pid=30843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.590:4253654): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134332E3139302E3130372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A35373A3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.596:4253655): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674674404.596:4253655): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac5fc41d010 items=0 ppid=1588 pid=30844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.596:4253655): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132342E38392E3131362E3137382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431383A35373A3334002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.601:4253656): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674674404.601:4253656): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aae8c55d010 items=0 ppid=1588 pid=30845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.601:4253656): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3135362E31342E37312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A31303A3237002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.607:4253657): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674674404.607:4253657): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac84d6e7010 items=0 ppid=1588 pid=30846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.607:4253657): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132342E38382E3231382E3132322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A31313A3233002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674674404.612:4253658): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674674404.612:4253658): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b602c60d010 items=0 ppid=1588 pid=30847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674404.612:4253658): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E3230312E37372E3130302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A31343A3437002D6A0044524F50
type=CRED_DISP msg=audit(1674674405.342:4253659): pid=30797 uid=0 auid=0 ses=258404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674405.345:4253660): pid=30797 uid=0 auid=0 ses=258404 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674423.453:4253661): avc: denied { name_connect } for pid=30075 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674674423.453:4253661): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffddc3cc190 a2=10 a3=7ffddc3cc18c items=0 ppid=5547 pid=30075 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674423.453:4253661): proctitle="dovecot/auth"
type=AVC msg=audit(1674674423.464:4253662): avc: denied { write } for pid=30567 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674674423.464:4253662): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe949a1a40 a2=6e a3=63d180f7 items=0 ppid=5547 pid=30567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674423.464:4253662): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674674461.365:4253663): pid=31039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674461.365:4253664): pid=31039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674461.366:4253665): pid=31039 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258407 res=1
type=USER_START msg=audit(1674674461.380:4253666): pid=31039 uid=0 auid=1055 ses=258407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674461.382:4253667): pid=31039 uid=0 auid=1055 ses=258407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674461.628:4253668): pid=31039 uid=0 auid=1055 ses=258407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674461.629:4253669): pid=31039 uid=0 auid=1055 ses=258407 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674674465.466:4253670): pid=31060 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.466:4253671): pid=31060 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.467:4253672): pid=31060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.485:4253673): pid=31060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.489:4253674): pid=31060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.489:4253675): pid=31060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.509:4253676): pid=31064 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.509:4253677): pid=31064 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.509:4253678): pid=31064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.523:4253679): pid=31064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.526:4253680): pid=31064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.526:4253681): pid=31064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.546:4253682): pid=31071 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.546:4253683): pid=31071 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.547:4253684): pid=31071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.562:4253685): pid=31071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.565:4253686): pid=31071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.566:4253687): pid=31071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.684:4253688): pid=31077 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.684:4253689): pid=31077 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.684:4253690): pid=31077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.697:4253691): pid=31077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.700:4253692): pid=31077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.700:4253693): pid=31077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.722:4253694): pid=31081 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.722:4253695): pid=31081 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.723:4253696): pid=31081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.735:4253697): pid=31081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.738:4253698): pid=31081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.738:4253699): pid=31081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.759:4253700): pid=31085 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.760:4253701): pid=31085 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.760:4253702): pid=31085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.772:4253703): pid=31085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.776:4253704): pid=31085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.776:4253705): pid=31085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.807:4253706): pid=31091 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.807:4253707): pid=31091 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.807:4253708): pid=31091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.822:4253709): pid=31091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.825:4253710): pid=31091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.825:4253711): pid=31091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.846:4253712): pid=31097 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.847:4253713): pid=31097 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.847:4253714): pid=31097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.861:4253715): pid=31097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.864:4253716): pid=31097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.864:4253717): pid=31097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.885:4253718): pid=31100 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.885:4253719): pid=31100 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.885:4253720): pid=31100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.899:4253721): pid=31100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.903:4253722): pid=31100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.903:4253723): pid=31100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.926:4253724): pid=31104 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.926:4253725): pid=31104 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.927:4253726): pid=31104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.942:4253727): pid=31104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.946:4253728): pid=31104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.946:4253729): pid=31104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674465.971:4253730): pid=31110 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674465.972:4253731): pid=31110 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674674465.972:4253732): pid=31110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674465.991:4253733): pid=31110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674465.994:4253734): pid=31110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674465.994:4253735): pid=31110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674468.068:4253736): pid=31123 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674468.068:4253737): pid=31123 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674674468.069:4253738): pid=31123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674468.083:4253739): pid=31123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674468.139:4253740): pid=31123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674468.139:4253741): pid=31123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674468.168:4253742): pid=31130 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674468.168:4253743): pid=31130 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674674468.168:4253744): pid=31130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674468.181:4253745): pid=31130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674468.273:4253746): pid=31130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674468.273:4253747): pid=31130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674468.296:4253748): pid=31139 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674468.296:4253749): pid=31139 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674674468.296:4253750): pid=31139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674468.309:4253751): pid=31139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674468.430:4253752): pid=31139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674468.431:4253753): pid=31139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674468.467:4253754): pid=31146 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674468.467:4253755): pid=31146 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674674468.467:4253756): pid=31146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674468.480:4253757): pid=31146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674468.484:4253758): pid=31146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674468.484:4253759): pid=31146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674468.506:4253760): pid=31151 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674468.506:4253761): pid=31151 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6971374B31573636624F794148664D612E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674674468.506:4253762): pid=31151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674468.519:4253763): pid=31151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674468.521:4253764): pid=31151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674468.522:4253765): pid=31151 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674468.543:4253766): pid=31155 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674468.543:4253767): pid=31155 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6971374B31573636624F794148664D612E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674674468.543:4253768): pid=31155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674468.556:4253769): pid=31155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674468.561:4253770): pid=31155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674468.561:4253771): pid=31155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674468.583:4253772): pid=31162 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674468.583:4253773): pid=31162 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6971374B31573636624F794148664D612E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674674468.583:4253774): pid=31162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674468.596:4253775): pid=31162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674468.599:4253776): pid=31162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674468.599:4253777): pid=31162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674468.620:4253778): pid=31167 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674468.620:4253779): pid=31167 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674674468.620:4253780): pid=31167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674468.635:4253781): pid=31167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674468.640:4253782): pid=31167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674468.640:4253783): pid=31167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674469.024:4253784): pid=31174 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674469.024:4253785): pid=31174 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674674469.024:4253786): pid=31174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674469.037:4253787): pid=31174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674469.040:4253788): pid=31174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674469.040:4253789): pid=31174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674470.096:4253790): pid=31181 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674470.096:4253791): pid=31181 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674674470.096:4253792): pid=31181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674470.109:4253793): pid=31181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674470.112:4253794): pid=31181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674470.112:4253795): pid=31181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674470.133:4253796): pid=31186 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674470.133:4253797): pid=31186 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674674470.133:4253798): pid=31186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674470.146:4253799): pid=31186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674470.150:4253800): pid=31186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674470.150:4253801): pid=31186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674470.171:4253802): pid=31191 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674470.171:4253803): pid=31191 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674674470.171:4253804): pid=31191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674470.186:4253805): pid=31191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674470.189:4253806): pid=31191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674470.189:4253807): pid=31191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674470.214:4253808): pid=31196 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674470.214:4253809): pid=31196 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674674470.215:4253810): pid=31196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674470.228:4253811): pid=31196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674470.353:4253812): pid=31196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674470.353:4253813): pid=31196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674471.149:4253814): pid=31204 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674471.149:4253815): pid=31204 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674674471.149:4253816): pid=31204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674471.164:4253817): pid=31204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674471.222:4253818): pid=31204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674471.222:4253819): pid=31204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674471.251:4253820): pid=31210 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674471.251:4253821): pid=31210 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674674471.251:4253822): pid=31210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674471.265:4253823): pid=31210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674472.391:4253824): pid=31210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674472.391:4253825): pid=31210 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674472.581:4253826): pid=31220 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674472.582:4253827): pid=31220 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674674472.582:4253828): pid=31220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674472.596:4253829): pid=31220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674473.782:4253830): pid=31220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674473.782:4253831): pid=31220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674473.986:4253832): pid=31232 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674473.987:4253833): pid=31232 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674674473.988:4253834): pid=31232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674474.007:4253835): pid=31232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674475.656:4253836): pid=31232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674475.656:4253837): pid=31232 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674475.886:4253838): pid=31251 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674475.886:4253839): pid=31251 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674674475.886:4253840): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674475.899:4253841): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674477.042:4253842): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674477.043:4253843): pid=31251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674477.128:4253844): pid=31263 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674477.128:4253845): pid=31263 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674674477.128:4253846): pid=31263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674477.141:4253847): pid=31263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674477.500:4253848): pid=31263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674477.500:4253849): pid=31263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674477.630:4253850): pid=31270 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674477.630:4253851): pid=31270 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674674477.631:4253852): pid=31270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674477.644:4253853): pid=31270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674479.776:4253854): pid=31270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674479.776:4253855): pid=31270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674480.012:4253856): pid=31290 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674480.012:4253857): pid=31290 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F55474F43524D2F75676F5F626C672026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F55474F43524D2F75676F5F626C67202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674674480.012:4253858): pid=31290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674480.028:4253859): pid=31290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674481.119:4253860): pid=31290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674481.119:4253861): pid=31290 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674481.316:4253862): pid=31302 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674481.317:4253863): pid=31302 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674674481.317:4253864): pid=31302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674481.330:4253865): pid=31302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674482.452:4253866): pid=31302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674482.453:4253867): pid=31302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674674483.277:4253868): pid=31317 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674674483.277:4253869): pid=31317 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674674483.277:4253870): pid=31317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674674483.290:4253871): pid=31317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674674484.345:4253872): pid=31317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674674484.345:4253873): pid=31317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674674486.740:4253874): avc: denied { write } for pid=30567 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674674486.740:4253874): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe949a1a40 a2=6e a3=63d18136 items=0 ppid=5547 pid=30567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674486.740:4253874): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674674495.985:4253875): pid=31378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674495.985:4253876): pid=31378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674495.985:4253877): pid=31378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31378 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674674496.555:4253878): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=31378 suid=74 rport=39938 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674674496.556:4253879): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=31378 suid=74 rport=39938 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674674497.275:4253880): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674674499.459:4253881): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674674499.737:4253882): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31378 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674499.737:4253883): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31378 suid=74 rport=39938 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674499.738:4253884): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674499.738:4253885): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674499.738:4253886): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31376 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674674499.738:4253887): pid=31376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=AVC msg=audit(1674674501.631:4253888): avc: denied { name_connect } for pid=30075 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674674501.631:4253888): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffddc3cc190 a2=10 a3=7ffddc3cc18c items=0 ppid=5547 pid=30075 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674501.631:4253888): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674674521.646:4253889): pid=31448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674521.647:4253890): pid=31448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674521.647:4253891): pid=31448 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258408 res=1
type=USER_START msg=audit(1674674521.663:4253892): pid=31448 uid=0 auid=1055 ses=258408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674521.666:4253893): pid=31448 uid=0 auid=1055 ses=258408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674521.922:4253894): pid=31448 uid=0 auid=1055 ses=258408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674521.924:4253895): pid=31448 uid=0 auid=1055 ses=258408 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674674542.001:4253896): pid=31510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674542.001:4253897): pid=31510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674542.001:4253898): pid=31510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31510 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674674542.003:4253899): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=31510 suid=74 rport=41965 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.113.227 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674674542.003:4253900): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=31510 suid=74 rport=41965 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.113.227 terminal=? res=success'
type=USER_AUTH msg=audit(1674674543.382:4253901): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.126.113.227 addr=59.126.113.227 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674674545.546:4253902): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.113.227 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674674546.225:4253903): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31510 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674546.225:4253904): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31510 suid=74 rport=41965 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.113.227 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674546.226:4253905): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674546.227:4253906): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674546.227:4253907): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674674546.227:4253908): pid=31506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.113.227 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674674581.943:4253909): pid=31641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674581.943:4253910): pid=31641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674581.945:4253911): pid=31641 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258409 res=1
type=USER_START msg=audit(1674674581.960:4253912): pid=31641 uid=0 auid=1055 ses=258409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674581.961:4253913): pid=31641 uid=0 auid=1055 ses=258409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674582.241:4253914): pid=31641 uid=0 auid=1055 ses=258409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674582.242:4253915): pid=31641 uid=0 auid=1055 ses=258409 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674674641.256:4253916): pid=31826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674641.257:4253917): pid=31826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674641.257:4253918): pid=31826 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258410 res=1
type=USER_START msg=audit(1674674641.273:4253919): pid=31826 uid=0 auid=1055 ses=258410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674641.275:4253920): pid=31826 uid=0 auid=1055 ses=258410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674641.518:4253921): pid=31826 uid=0 auid=1055 ses=258410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674641.520:4253922): pid=31826 uid=0 auid=1055 ses=258410 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674674650.962:4253923): pid=31860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31860 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674650.963:4253924): pid=31860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31860 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674650.963:4253925): pid=31860 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31860 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674674678.054:4253926): avc: denied { read } for pid=31966 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674678.054:4253926): avc: denied { open } for pid=31966 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674678.054:4253926): arch=c000003e syscall=2 success=yes exit=18 a0=55beaea42f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=31966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674678.054:4253926): proctitle="dovecot/auth"
type=AVC msg=audit(1674674678.054:4253927): avc: denied { getattr } for pid=31966 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674678.054:4253927): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcfb3f7ce0 a2=7ffcfb3f7ce0 a3=fffffc00 items=0 ppid=5547 pid=31966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674678.054:4253927): proctitle="dovecot/auth"
type=AVC msg=audit(1674674678.612:4253928): avc: denied { name_connect } for pid=31966 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674674678.612:4253928): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcfb3f7ad0 a2=10 a3=7ffcfb3f7acc items=0 ppid=5547 pid=31966 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674678.612:4253928): proctitle="dovecot/auth"
type=AVC msg=audit(1674674678.646:4253929): avc: denied { write } for pid=31997 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674674678.646:4253929): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff6f87f4c0 a2=6e a3=63d181f6 items=0 ppid=5547 pid=31997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674678.646:4253929): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674674701.535:4253930): pid=32109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674674701.535:4253931): pid=32110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674701.535:4253932): pid=32109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674701.535:4253933): pid=32110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674701.536:4253934): pid=32110 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258411 res=1
type=LOGIN msg=audit(1674674701.536:4253935): pid=32109 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258412 res=1
type=USER_START msg=audit(1674674701.574:4253936): pid=32109 uid=0 auid=0 ses=258412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674674701.574:4253937): pid=32110 uid=0 auid=1055 ses=258411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674701.576:4253938): pid=32110 uid=0 auid=1055 ses=258411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674701.577:4253939): pid=32109 uid=0 auid=0 ses=258412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674701.979:4253940): pid=32110 uid=0 auid=1055 ses=258411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674702.010:4253941): pid=32110 uid=0 auid=1055 ses=258411 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674704.990:4253942): pid=32109 uid=0 auid=0 ses=258412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674704.992:4253943): pid=32109 uid=0 auid=0 ses=258412 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674674762.014:4253944): pid=32317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674762.014:4253945): pid=32317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674762.014:4253946): pid=32317 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258413 res=1
type=USER_START msg=audit(1674674762.030:4253947): pid=32317 uid=0 auid=1055 ses=258413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674762.032:4253948): pid=32317 uid=0 auid=1055 ses=258413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674762.320:4253949): pid=32317 uid=0 auid=1055 ses=258413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674762.321:4253950): pid=32317 uid=0 auid=1055 ses=258413 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674800.201:4253951): avc: denied { read } for pid=32449 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674800.201:4253951): avc: denied { open } for pid=32449 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674800.201:4253951): arch=c000003e syscall=2 success=yes exit=18 a0=55aa2b00cf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=32449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674800.201:4253951): proctitle="dovecot/auth"
type=AVC msg=audit(1674674800.201:4253952): avc: denied { getattr } for pid=32449 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674800.201:4253952): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe464182d0 a2=7ffe464182d0 a3=fffffc00 items=0 ppid=5547 pid=32449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674800.201:4253952): proctitle="dovecot/auth"
type=AVC msg=audit(1674674802.071:4253953): avc: denied { name_connect } for pid=32449 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674674802.071:4253953): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe464180c0 a2=10 a3=7ffe464180bc items=0 ppid=5547 pid=32449 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674802.071:4253953): proctitle="dovecot/auth"
type=AVC msg=audit(1674674802.100:4253954): avc: denied { write } for pid=32457 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674674802.100:4253954): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff29959060 a2=6e a3=63d18272 items=0 ppid=5547 pid=32457 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674802.100:4253954): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674674821.339:4253955): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674821.339:4253956): pid=32534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674821.340:4253957): pid=32534 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258414 res=1
type=USER_START msg=audit(1674674821.356:4253958): pid=32534 uid=0 auid=1055 ses=258414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674821.357:4253959): pid=32534 uid=0 auid=1055 ses=258414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674821.642:4253960): pid=32534 uid=0 auid=1055 ses=258414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674821.644:4253961): pid=32534 uid=0 auid=1055 ses=258414 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674674834.991:4253962): pid=32573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674834.991:4253963): pid=32573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674834.991:4253964): pid=32573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674674835.223:4253965): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=32573 suid=74 rport=50702 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674674835.223:4253966): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=32573 suid=74 rport=50702 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=USER_AUTH msg=audit(1674674836.272:4253967): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=81.161.229.135 addr=81.161.229.135 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674674837.993:4253968): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674674838.217:4253969): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32573 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674838.217:4253970): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32573 suid=74 rport=50702 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674838.218:4253971): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674838.219:4253972): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674674838.219:4253973): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674674838.219:4253974): pid=32572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674674881.659:4253975): pid=32717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674674881.659:4253976): pid=32718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674881.659:4253977): pid=32717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674881.659:4253978): pid=32718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674881.659:4253979): pid=32718 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258415 res=1
type=LOGIN msg=audit(1674674881.659:4253980): pid=32717 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258416 res=1
type=USER_START msg=audit(1674674881.685:4253981): pid=32718 uid=0 auid=1055 ses=258415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674674881.686:4253982): pid=32717 uid=0 auid=0 ses=258416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674881.688:4253983): pid=32718 uid=0 auid=1055 ses=258415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674881.688:4253984): pid=32717 uid=0 auid=0 ses=258416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674881.736:4253985): pid=32717 uid=0 auid=0 ses=258416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674881.738:4253986): pid=32717 uid=0 auid=0 ses=258416 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674881.925:4253987): pid=32718 uid=0 auid=1055 ses=258415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674881.928:4253988): pid=32718 uid=0 auid=1055 ses=258415 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674900.203:4253989): avc: denied { name_connect } for pid=308 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674674900.203:4253989): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff4cafed00 a2=10 a3=7fff4cafecfc items=0 ppid=5547 pid=308 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674900.203:4253989): proctitle="dovecot/auth"
type=AVC msg=audit(1674674900.232:4253990): avc: denied { write } for pid=328 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674674900.232:4253990): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffadebc060 a2=6e a3=63d182d4 items=0 ppid=5547 pid=328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674900.232:4253990): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674674941.948:4253991): pid=472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674674941.949:4253992): pid=472 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674674941.949:4253993): pid=472 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258417 res=1
type=USER_START msg=audit(1674674941.964:4253994): pid=472 uid=0 auid=1055 ses=258417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674674941.966:4253995): pid=472 uid=0 auid=1055 ses=258417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674674942.221:4253996): pid=472 uid=0 auid=1055 ses=258417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674674942.222:4253997): pid=472 uid=0 auid=1055 ses=258417 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674674968.214:4253998): avc: denied { read append } for pid=585 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674968.214:4253998): avc: denied { open } for pid=585 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674968.214:4253998): arch=c000003e syscall=2 success=yes exit=8 a0=55eb60ee8a60 a1=402 a2=7ffd150bc380 a3=7ffd150bbe20 items=0 ppid=5547 pid=585 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674968.214:4253998): proctitle="dovecot/imap"
type=AVC msg=audit(1674674968.215:4253999): avc: denied { getattr } for pid=585 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674968.215:4253999): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffd150bc2e0 a2=7ffd150bc2e0 a3=7ffd150bbd60 items=0 ppid=5547 pid=585 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674968.215:4253999): proctitle="dovecot/imap"
type=AVC msg=audit(1674674968.215:4254000): avc: denied { write } for pid=585 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674968.215:4254000): arch=c000003e syscall=2 success=yes exit=10 a0=55eb60eed960 a1=2 a2=7ffd150bc080 a3=7ffd150bbb20 items=0 ppid=5547 pid=585 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674968.215:4254000): proctitle="dovecot/imap"
type=AVC msg=audit(1674674968.215:4254001): avc: denied { lock } for pid=585 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674968.215:4254001): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffd150bbf80 a3=63d18318 items=0 ppid=5547 pid=585 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674968.215:4254001): proctitle="dovecot/imap"
type=AVC msg=audit(1674674968.215:4254002): avc: denied { read } for pid=585 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674674968.215:4254002): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55eb60f162f8 a2=90800 a3=0 items=0 ppid=5547 pid=585 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674968.215:4254002): proctitle="dovecot/imap"
type=AVC msg=audit(1674674968.216:4254003): avc: denied { getattr } for pid=585 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674968.216:4254003): arch=c000003e syscall=4 success=yes exit=0 a0=55eb60ed8a60 a1=7ffd150bc330 a2=7ffd150bc330 a3=6f632e6f72676173 items=0 ppid=5547 pid=585 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674968.216:4254003): proctitle="dovecot/imap"
type=AVC msg=audit(1674674970.465:4254004): avc: denied { write } for pid=592 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674674970.465:4254004): arch=c000003e syscall=21 success=yes exit=0 a0=5559876644c0 a1=2 a2=7b48 a3=7ffe1fbdc620 items=0 ppid=5547 pid=592 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674970.465:4254004): proctitle="dovecot/imap"
type=AVC msg=audit(1674674996.005:4254005): avc: denied { read append } for pid=685 comm="lmtp" name="maildirsize" dev="vda1" ino=320594718 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674996.005:4254005): avc: denied { open } for pid=685 comm="lmtp" path="/home/wwwresourcehunte/mail/maildirsize" dev="vda1" ino=320594718 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.005:4254005): arch=c000003e syscall=2 success=yes exit=17 a0=55a95fe7c9f0 a1=402 a2=7ffe613f2180 a3=fffff800 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.005:4254005): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.007:4254006): avc: denied { getattr } for pid=685 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.log" dev="vda1" ino=320594709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.007:4254006): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffe613f3000 a2=7ffe613f3000 a3=7ffe613f2a60 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.007:4254006): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.007:4254007): avc: denied { write } for pid=685 comm="lmtp" name="dovecot.index" dev="vda1" ino=320594715 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.007:4254007): arch=c000003e syscall=2 success=yes exit=18 a0=55a95febac10 a1=2 a2=7ffe613f2da0 a3=7ffe613f2860 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.007:4254007): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.007:4254008): avc: denied { read write } for pid=685 comm="lmtp" name="dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674674996.007:4254008): avc: denied { open } for pid=685 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot-uidlist" dev="vda1" ino=320200848 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.007:4254008): arch=c000003e syscall=2 success=yes exit=19 a0=55a95feb01d0 a1=2 a2=7ffe613f3020 a3=7ffe613f2ce0 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.007:4254008): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.012:4254009): avc: denied { write } for pid=685 comm="lmtp" name="tmp" dev="vda1" ino=58914102 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674674996.012:4254009): avc: denied { add_name } for pid=685 comm="lmtp" name="1674674996.M7439P685.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674674996.012:4254009): avc: denied { create } for pid=685 comm="lmtp" name="1674674996.M7439P685.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.012:4254009): arch=c000003e syscall=2 success=yes exit=21 a0=55a95fe12228 a1=2c1 a2=1ff a3=7ffe613f2c20 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.012:4254009): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.014:4254010): avc: denied { lock } for pid=685 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.log" dev="vda1" ino=320594709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.014:4254010): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffe613f2c30 a3=63d18334 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.014:4254010): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.015:4254011): avc: denied { remove_name } for pid=685 comm="lmtp" name="1674674996.M7439P685.host.nexidigital.com" dev="vda1" ino=62201780 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674674996.015:4254011): avc: denied { rename } for pid=685 comm="lmtp" name="1674674996.M7439P685.host.nexidigital.com" dev="vda1" ino=62201780 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.015:4254011): arch=c000003e syscall=82 success=yes exit=0 a0=55a95fe115a0 a1=55a95fe115f0 a2=69f0 a3=7ffe613f2be0 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.015:4254011): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.015:4254012): avc: denied { read } for pid=685 comm="lmtp" name="new" dev="vda1" ino=58914101 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674674996.015:4254012): arch=c000003e syscall=2 success=yes exit=21 a0=55a95fecf410 a1=0 a2=0 a3=7ffe613f2be0 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.015:4254012): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.018:4254013): avc: denied { lock } for pid=685 comm="lmtp" path="/home/wwwresourcehunte/mail/dovecot.index.cache" dev="vda1" ino=320202326 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.018:4254013): arch=c000003e syscall=72 success=yes exit=0 a0=16 a1=7 a2=7ffe613f2f50 a3=63d18334 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.018:4254013): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.018:4254014): avc: denied { unlink } for pid=685 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=320614327 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.018:4254014): arch=c000003e syscall=87 success=yes exit=0 a0=55a95febb300 a1=7f28998e6071 a2=2f9 a3=4 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.018:4254014): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.018:4254015): avc: denied { append } for pid=685 comm="lmtp" name="dovecot.list.index.log" dev="vda1" ino=320200839 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.018:4254015): arch=c000003e syscall=2 success=yes exit=21 a0=55a95fececa0 a1=402 a2=7ffe613f30b0 a3=4 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.018:4254015): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.019:4254016): avc: denied { link } for pid=685 comm="lmtp" name=".temp.host.nexidigital.com.685.384dccaef52aa2e5" dev="vda1" ino=320614327 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.019:4254016): arch=c000003e syscall=86 success=yes exit=0 a0=55a95fe12900 a1=55a95fe12870 a2=1 a3=63d18334 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.019:4254016): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674674996.020:4254017): avc: denied { setattr } for pid=685 comm="lmtp" name=".temp.host.nexidigital.com.685.384dccaef52aa2e5" dev="vda1" ino=320614327 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674674996.020:4254017): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=426 a3=36 items=0 ppid=5547 pid=685 auid=4294967295 uid=0 gid=1062 euid=1060 suid=0 fsuid=1060 egid=1062 sgid=1062 fsgid=1062 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674674996.020:4254017): proctitle="dovecot/lmtp"
type=USER_ACCT msg=audit(1674675001.241:4254018): pid=826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675001.241:4254019): pid=827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675001.241:4254020): pid=828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675001.241:4254021): pid=826 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675001.241:4254022): pid=827 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675001.241:4254023): pid=828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675001.242:4254024): pid=826 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258418 res=1
type=LOGIN msg=audit(1674675001.242:4254025): pid=827 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258419 res=1
type=LOGIN msg=audit(1674675001.242:4254026): pid=828 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258420 res=1
type=USER_START msg=audit(1674675001.288:4254027): pid=826 uid=0 auid=0 ses=258418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675001.289:4254028): pid=828 uid=0 auid=1055 ses=258420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675001.289:4254029): pid=827 uid=0 auid=0 ses=258419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675001.291:4254032): pid=826 uid=0 auid=0 ses=258418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675001.291:4254031): pid=828 uid=0 auid=1055 ses=258420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675001.291:4254030): pid=827 uid=0 auid=0 ses=258419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675001.320:4254033): pid=826 uid=0 auid=0 ses=258418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675001.326:4254034): pid=826 uid=0 auid=0 ses=258418 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675001.636:4254035): pid=828 uid=0 auid=1055 ses=258420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675001.638:4254036): pid=828 uid=0 auid=1055 ses=258420 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674675002.573:4254037): avc: denied { name_connect } for pid=308 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674675002.573:4254037): arch=c000003e syscall=42 success=no exit=-115 a0=1a a1=7fff4cafed00 a2=10 a3=7fff4cafecfc items=0 ppid=5547 pid=308 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675002.573:4254037): proctitle="dovecot/auth"
type=AVC msg=audit(1674675002.587:4254038): avc: denied { write } for pid=328 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674675002.587:4254038): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffadebc060 a2=6e a3=63d1833a items=0 ppid=5547 pid=328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675002.587:4254038): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674675004.663:4254039): pid=827 uid=0 auid=0 ses=258419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675004.666:4254040): pid=827 uid=0 auid=0 ses=258419 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675061.687:4254041): pid=1050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675061.687:4254042): pid=1050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675061.689:4254043): pid=1050 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258421 res=1
type=USER_START msg=audit(1674675061.704:4254044): pid=1050 uid=0 auid=1055 ses=258421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675061.705:4254045): pid=1050 uid=0 auid=1055 ses=258421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675061.955:4254046): pid=1050 uid=0 auid=1055 ses=258421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675061.958:4254047): pid=1050 uid=0 auid=1055 ses=258421 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675121.974:4254048): pid=1249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675121.974:4254049): pid=1249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675121.975:4254050): pid=1249 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258422 res=1
type=USER_START msg=audit(1674675121.989:4254051): pid=1249 uid=0 auid=1055 ses=258422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675121.991:4254052): pid=1249 uid=0 auid=1055 ses=258422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675122.254:4254053): pid=1249 uid=0 auid=1055 ses=258422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675122.256:4254054): pid=1249 uid=0 auid=1055 ses=258422 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675181.271:4254055): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675181.271:4254056): pid=1440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675181.271:4254057): pid=1440 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258423 res=1
type=USER_START msg=audit(1674675181.281:4254058): pid=1440 uid=0 auid=1055 ses=258423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675181.283:4254059): pid=1440 uid=0 auid=1055 ses=258423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675181.501:4254060): pid=1440 uid=0 auid=1055 ses=258423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675181.503:4254061): pid=1440 uid=0 auid=1055 ses=258423 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674675204.645:4254062): pid=1506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675204.645:4254063): pid=1506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675204.645:4254064): pid=1506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1506 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674675204.891:4254065): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=1506 suid=74 rport=61987 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.25.20.111 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674675204.891:4254066): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=1506 suid=74 rport=61987 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.25.20.111 terminal=? res=success'
type=USER_AUTH msg=audit(1674675206.342:4254067): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.25.20.111 addr=59.25.20.111 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675208.190:4254068): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.25.20.111 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675209.022:4254069): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.25.20.111 addr=59.25.20.111 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675210.814:4254070): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.25.20.111 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675211.704:4254071): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=59.25.20.111 addr=59.25.20.111 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675213.907:4254072): pid=1505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.25.20.111 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674675214.424:4254073): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674675214.424:4254073): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f16c8e54010 items=0 ppid=1558 pid=1561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675214.424:4254073): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674675214.430:4254074): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674675214.430:4254074): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd4eb3de010 items=0 ppid=1558 pid=1562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675214.430:4254074): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674675214.434:4254075): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674675214.434:4254075): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff7f56b4010 items=0 ppid=1558 pid=1563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675214.434:4254075): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674675214.439:4254076): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674675214.439:4254076): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcc054cb010 items=0 ppid=1558 pid=1564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675214.439:4254076): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674675214.736:4254077): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674675214.736:4254077): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feaade7e010 items=0 ppid=1558 pid=1573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675214.736:4254077): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730035392E32372E32302E323032002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674675214.742:4254078): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674675214.742:4254078): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8e65cf5010 items=0 ppid=1558 pid=1574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675214.742:4254078): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640035392E32372E32302E323032002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674675214.747:4254079): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674675214.747:4254079): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5478327010 items=0 ppid=1558 pid=1575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675214.747:4254079): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035392E32352E32302E313131002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674675214.753:4254080): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674675214.753:4254080): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2ea9c9b010 items=0 ppid=1558 pid=1576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675214.753:4254080): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035392E32352E32302E313131002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674675241.517:4254081): pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675241.517:4254082): pid=1670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675241.518:4254083): pid=1670 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258424 res=1
type=USER_START msg=audit(1674675241.533:4254084): pid=1670 uid=0 auid=1055 ses=258424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675241.535:4254085): pid=1670 uid=0 auid=1055 ses=258424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675241.882:4254086): pid=1670 uid=0 auid=1055 ses=258424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675241.884:4254087): pid=1670 uid=0 auid=1055 ses=258424 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674675267.972:4254088): avc: denied { read } for pid=1772 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674675267.972:4254088): avc: denied { open } for pid=1772 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675267.972:4254088): arch=c000003e syscall=2 success=yes exit=18 a0=5572e1c71f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675267.972:4254088): proctitle="dovecot/auth"
type=AVC msg=audit(1674675267.973:4254089): avc: denied { getattr } for pid=1772 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675267.973:4254089): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe1e99cac0 a2=7ffe1e99cac0 a3=fffffc00 items=0 ppid=5547 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675267.973:4254089): proctitle="dovecot/auth"
type=AVC msg=audit(1674675269.600:4254090): avc: denied { name_connect } for pid=1772 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674675269.600:4254090): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe1e99c8b0 a2=10 a3=7ffe1e99c8ac items=0 ppid=5547 pid=1772 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675269.600:4254090): proctitle="dovecot/auth"
type=AVC msg=audit(1674675269.628:4254091): avc: denied { write } for pid=1793 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674675269.628:4254091): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdbe743670 a2=6e a3=63d18445 items=0 ppid=5547 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675269.628:4254091): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674675280.964:4254092): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674675280.964:4254092): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab4f0f07010 items=0 ppid=1831 pid=1836 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675280.964:4254092): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131382E3132322E33382E3337002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=AVC msg=audit(1674675284.268:4254093): avc: denied { write } for pid=1793 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674675284.268:4254093): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdbe743670 a2=6e a3=63d18454 items=0 ppid=5547 pid=1793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675284.268:4254093): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674675301.902:4254094): pid=2005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675301.902:4254096): pid=2006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675301.902:4254095): pid=2007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675301.902:4254097): pid=2008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675301.902:4254098): pid=2005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675301.902:4254099): pid=2006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675301.902:4254100): pid=2007 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675301.902:4254101): pid=2008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675301.902:4254102): pid=2005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258425 res=1
type=LOGIN msg=audit(1674675301.902:4254103): pid=2006 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258426 res=1
type=LOGIN msg=audit(1674675301.902:4254104): pid=2008 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258427 res=1
type=LOGIN msg=audit(1674675301.902:4254105): pid=2007 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258428 res=1
type=USER_START msg=audit(1674675301.979:4254106): pid=2007 uid=0 auid=0 ses=258428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675301.980:4254107): pid=2005 uid=0 auid=0 ses=258425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675301.980:4254108): pid=2006 uid=0 auid=0 ses=258426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675301.981:4254109): pid=2008 uid=0 auid=1055 ses=258427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675301.982:4254110): pid=2008 uid=0 auid=1055 ses=258427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675301.982:4254111): pid=2007 uid=0 auid=0 ses=258428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675301.982:4254112): pid=2005 uid=0 auid=0 ses=258425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675301.983:4254113): pid=2006 uid=0 auid=0 ses=258426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675302.078:4254114): pid=2006 uid=0 auid=0 ses=258426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675302.082:4254115): pid=2006 uid=0 auid=0 ses=258426 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675302.091:4254116): pid=2007 uid=0 auid=0 ses=258428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675302.095:4254117): pid=2007 uid=0 auid=0 ses=258428 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675302.344:4254118): pid=2008 uid=0 auid=1055 ses=258427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675302.347:4254119): pid=2008 uid=0 auid=1055 ses=258427 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675305.353:4254120): pid=2005 uid=0 auid=0 ses=258425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675305.355:4254121): pid=2005 uid=0 auid=0 ses=258425 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675361.377:4254122): pid=2224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675361.377:4254123): pid=2224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675361.378:4254124): pid=2224 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258429 res=1
type=USER_START msg=audit(1674675361.397:4254125): pid=2224 uid=0 auid=1055 ses=258429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675361.399:4254126): pid=2224 uid=0 auid=1055 ses=258429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675361.761:4254127): pid=2224 uid=0 auid=1055 ses=258429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675361.764:4254128): pid=2224 uid=0 auid=1055 ses=258429 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675421.778:4254129): pid=2435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675421.778:4254130): pid=2435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675421.778:4254131): pid=2435 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258430 res=1
type=USER_START msg=audit(1674675421.793:4254132): pid=2435 uid=0 auid=1055 ses=258430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675421.795:4254133): pid=2435 uid=0 auid=1055 ses=258430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675422.066:4254134): pid=2435 uid=0 auid=1055 ses=258430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675422.068:4254135): pid=2435 uid=0 auid=1055 ses=258430 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675481.081:4254136): pid=2618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675481.082:4254137): pid=2618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675481.082:4254138): pid=2618 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258431 res=1
type=USER_START msg=audit(1674675481.096:4254139): pid=2618 uid=0 auid=1055 ses=258431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675481.097:4254140): pid=2618 uid=0 auid=1055 ses=258431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675481.350:4254141): pid=2618 uid=0 auid=1055 ses=258431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675481.352:4254142): pid=2618 uid=0 auid=1055 ses=258431 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674675527.366:4254143): avc: denied { read } for pid=2775 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674675527.366:4254143): avc: denied { open } for pid=2775 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675527.366:4254143): arch=c000003e syscall=2 success=yes exit=18 a0=55b14bd24f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675527.366:4254143): proctitle="dovecot/auth"
type=AVC msg=audit(1674675527.366:4254144): avc: denied { getattr } for pid=2775 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675527.366:4254144): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffef910ea50 a2=7ffef910ea50 a3=fffffc00 items=0 ppid=5547 pid=2775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675527.366:4254144): proctitle="dovecot/auth"
type=AVC msg=audit(1674675529.162:4254145): avc: denied { name_connect } for pid=2775 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674675529.162:4254145): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffef910e840 a2=10 a3=7ffef910e83c items=0 ppid=5547 pid=2775 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675529.162:4254145): proctitle="dovecot/auth"
type=AVC msg=audit(1674675529.193:4254146): avc: denied { write } for pid=2781 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674675529.193:4254146): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff858a8020 a2=6e a3=63d18549 items=0 ppid=5547 pid=2781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675529.193:4254146): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674675541.364:4254147): pid=2822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675541.364:4254148): pid=2822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675541.364:4254149): pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675541.364:4254150): pid=2823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675541.365:4254151): pid=2822 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258432 res=1
type=LOGIN msg=audit(1674675541.365:4254152): pid=2823 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258433 res=1
type=USER_START msg=audit(1674675541.398:4254153): pid=2823 uid=0 auid=1055 ses=258433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675541.399:4254154): pid=2823 uid=0 auid=1055 ses=258433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675541.399:4254155): pid=2822 uid=0 auid=0 ses=258432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675541.400:4254156): pid=2822 uid=0 auid=0 ses=258432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675541.733:4254157): pid=2823 uid=0 auid=1055 ses=258433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675541.737:4254158): pid=2823 uid=0 auid=1055 ses=258433 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675542.831:4254159): pid=2822 uid=0 auid=0 ses=258432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675542.833:4254160): pid=2822 uid=0 auid=0 ses=258432 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675601.853:4254161): pid=3025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675601.853:4254162): pid=3027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675601.853:4254163): pid=3025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675601.853:4254164): pid=3027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675601.853:4254165): pid=3025 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258434 res=1
type=LOGIN msg=audit(1674675601.853:4254166): pid=3027 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258435 res=1
type=USER_ACCT msg=audit(1674675601.861:4254167): pid=3026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675601.861:4254168): pid=3026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675601.861:4254169): pid=3026 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258436 res=1
type=USER_START msg=audit(1674675601.906:4254170): pid=3027 uid=0 auid=1055 ses=258435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675601.909:4254171): pid=3027 uid=0 auid=1055 ses=258435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675601.918:4254172): pid=3026 uid=0 auid=0 ses=258436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675601.918:4254173): pid=3025 uid=0 auid=0 ses=258434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675601.918:4254174): pid=3026 uid=0 auid=0 ses=258436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675601.924:4254175): pid=3025 uid=0 auid=0 ses=258434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675601.998:4254176): pid=3025 uid=0 auid=0 ses=258434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675602.015:4254177): pid=3025 uid=0 auid=0 ses=258434 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675602.298:4254178): pid=3027 uid=0 auid=1055 ses=258435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675602.301:4254179): pid=3027 uid=0 auid=1055 ses=258435 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675605.322:4254180): pid=3026 uid=0 auid=0 ses=258436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675605.323:4254181): pid=3026 uid=0 auid=0 ses=258436 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674675610.707:4254182): avc: denied { read } for pid=3092 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674675610.707:4254182): avc: denied { open } for pid=3092 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675610.707:4254182): arch=c000003e syscall=2 success=yes exit=18 a0=5566a1751f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675610.707:4254182): proctitle="dovecot/auth"
type=AVC msg=audit(1674675610.707:4254183): avc: denied { getattr } for pid=3092 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675610.707:4254183): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd52194ad0 a2=7ffd52194ad0 a3=fffffc00 items=0 ppid=5547 pid=3092 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675610.707:4254183): proctitle="dovecot/auth"
type=AVC msg=audit(1674675611.299:4254184): avc: denied { name_connect } for pid=3092 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674675611.299:4254184): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd521948c0 a2=10 a3=7ffd521948bc items=0 ppid=5547 pid=3092 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675611.299:4254184): proctitle="dovecot/auth"
type=AVC msg=audit(1674675611.333:4254185): avc: denied { write } for pid=3123 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674675611.333:4254185): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffed8624080 a2=6e a3=63d1859b items=0 ppid=5547 pid=3123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675611.333:4254185): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674675661.358:4254186): pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675661.358:4254187): pid=3334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675661.360:4254188): pid=3334 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258437 res=1
type=USER_START msg=audit(1674675661.406:4254189): pid=3334 uid=0 auid=1055 ses=258437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675661.408:4254190): pid=3334 uid=0 auid=1055 ses=258437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675661.797:4254191): pid=3334 uid=0 auid=1055 ses=258437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675661.800:4254192): pid=3334 uid=0 auid=1055 ses=258437 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675721.815:4254193): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675721.815:4254194): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675721.815:4254195): pid=3533 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258438 res=1
type=USER_START msg=audit(1674675721.829:4254196): pid=3533 uid=0 auid=1055 ses=258438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675721.831:4254197): pid=3533 uid=0 auid=1055 ses=258438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675722.156:4254198): pid=3533 uid=0 auid=1055 ses=258438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675722.157:4254199): pid=3533 uid=0 auid=1055 ses=258438 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675781.171:4254200): pid=3716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675781.171:4254201): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675781.171:4254202): pid=3716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675781.171:4254203): pid=3716 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258439 res=1
type=CRED_ACQ msg=audit(1674675781.171:4254204): pid=3717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675781.171:4254205): pid=3717 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258440 res=1
type=USER_START msg=audit(1674675781.201:4254206): pid=3716 uid=0 auid=0 ses=258439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675781.202:4254207): pid=3717 uid=0 auid=1055 ses=258440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675781.203:4254208): pid=3716 uid=0 auid=0 ses=258439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675781.203:4254209): pid=3717 uid=0 auid=1055 ses=258440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675781.256:4254210): pid=3716 uid=0 auid=0 ses=258439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675781.259:4254211): pid=3716 uid=0 auid=0 ses=258439 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675781.468:4254212): pid=3717 uid=0 auid=1055 ses=258440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675781.469:4254213): pid=3717 uid=0 auid=1055 ses=258440 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675841.482:4254214): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675841.482:4254215): pid=3926 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675841.482:4254216): pid=3926 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258441 res=1
type=USER_START msg=audit(1674675841.494:4254217): pid=3926 uid=0 auid=1055 ses=258441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675841.495:4254218): pid=3926 uid=0 auid=1055 ses=258441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675841.785:4254219): pid=3926 uid=0 auid=1055 ses=258441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675841.787:4254220): pid=3926 uid=0 auid=1055 ses=258441 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674675878.232:4254221): pid=4121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675878.232:4254222): pid=4121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675878.232:4254223): pid=4121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674675878.410:4254224): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=4121 suid=74 rport=59082 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674675878.410:4254225): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=4121 suid=74 rport=59082 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674675879.403:4254226): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675881.642:4254227): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675884.822:4254228): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675886.749:4254229): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675889.929:4254230): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675891.542:4254231): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674675894.721:4254232): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4121 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675894.722:4254233): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4121 suid=74 rport=59082 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675894.723:4254234): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675894.724:4254235): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675894.724:4254236): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4120 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674675894.724:4254237): pid=4120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674675901.809:4254238): pid=4252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674675901.810:4254239): pid=4251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675901.817:4254241): pid=4251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675901.817:4254240): pid=4252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675901.818:4254242): pid=4251 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258442 res=1
type=LOGIN msg=audit(1674675901.818:4254243): pid=4252 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258443 res=1
type=USER_START msg=audit(1674675901.888:4254244): pid=4251 uid=0 auid=0 ses=258442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674675901.888:4254245): pid=4252 uid=0 auid=1055 ses=258443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675901.890:4254246): pid=4252 uid=0 auid=1055 ses=258443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675901.891:4254247): pid=4251 uid=0 auid=0 ses=258442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675902.262:4254248): pid=4252 uid=0 auid=1055 ses=258443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675902.268:4254249): pid=4252 uid=0 auid=1055 ses=258443 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675905.294:4254250): pid=4251 uid=0 auid=0 ses=258442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675905.297:4254251): pid=4251 uid=0 auid=0 ses=258442 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674675907.750:4254252): avc: denied { read } for pid=4297 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674675907.750:4254252): avc: denied { open } for pid=4297 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675907.750:4254252): arch=c000003e syscall=2 success=yes exit=18 a0=5647aaba5f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=4297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675907.750:4254252): proctitle="dovecot/auth"
type=AVC msg=audit(1674675907.750:4254253): avc: denied { getattr } for pid=4297 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675907.750:4254253): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffc5cacb20 a2=7fffc5cacb20 a3=fffffc00 items=0 ppid=5547 pid=4297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675907.750:4254253): proctitle="dovecot/auth"
type=AVC msg=audit(1674675909.736:4254254): avc: denied { name_connect } for pid=4297 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674675909.736:4254254): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffc5cac910 a2=10 a3=7fffc5cac90c items=0 ppid=5547 pid=4297 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675909.736:4254254): proctitle="dovecot/auth"
type=AVC msg=audit(1674675909.772:4254255): avc: denied { write } for pid=4303 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674675909.772:4254255): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb4108220 a2=6e a3=63d186c5 items=0 ppid=5547 pid=4303 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675909.772:4254255): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674675939.303:4254256): avc: denied { read append } for pid=4547 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674675939.303:4254256): avc: denied { open } for pid=4547 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675939.303:4254256): arch=c000003e syscall=2 success=yes exit=8 a0=55971ecaaa60 a1=402 a2=7ffdecbc34b0 a3=7ffdecbc2f20 items=0 ppid=5547 pid=4547 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675939.303:4254256): proctitle="dovecot/imap"
type=AVC msg=audit(1674675939.304:4254257): avc: denied { getattr } for pid=4547 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675939.304:4254257): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffdecbc3410 a2=7ffdecbc3410 a3=7ffdecbc2e60 items=0 ppid=5547 pid=4547 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675939.304:4254257): proctitle="dovecot/imap"
type=AVC msg=audit(1674675939.304:4254258): avc: denied { write } for pid=4547 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675939.304:4254258): arch=c000003e syscall=2 success=yes exit=10 a0=55971ecaf960 a1=2 a2=7ffdecbc31b0 a3=7ffdecbc2c60 items=0 ppid=5547 pid=4547 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675939.304:4254258): proctitle="dovecot/imap"
type=AVC msg=audit(1674675939.304:4254259): avc: denied { lock } for pid=4547 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675939.304:4254259): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffdecbc30b0 a3=63d186e3 items=0 ppid=5547 pid=4547 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675939.304:4254259): proctitle="dovecot/imap"
type=AVC msg=audit(1674675939.304:4254260): avc: denied { read } for pid=4547 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674675939.304:4254260): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55971ecd82f8 a2=90800 a3=0 items=0 ppid=5547 pid=4547 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675939.304:4254260): proctitle="dovecot/imap"
type=AVC msg=audit(1674675939.305:4254261): avc: denied { getattr } for pid=4547 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674675939.305:4254261): arch=c000003e syscall=4 success=yes exit=0 a0=55971ec9aa60 a1=7ffdecbc3460 a2=7ffdecbc3460 a3=6f632e6f72676173 items=0 ppid=5547 pid=4547 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675939.305:4254261): proctitle="dovecot/imap"
type=AVC msg=audit(1674675940.874:4254262): avc: denied { write } for pid=4558 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674675940.874:4254262): arch=c000003e syscall=21 success=yes exit=0 a0=5567afb994c0 a1=2 a2=7b48 a3=7ffd881e66e0 items=0 ppid=5547 pid=4558 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674675940.874:4254262): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674675949.956:4254263): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675949.956:4254264): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675949.956:4254265): pid=4640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674675950.164:4254266): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=4640 suid=74 rport=35097 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.132.211.83 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674675950.164:4254267): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=4640 suid=74 rport=35097 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.132.211.83 terminal=? res=success'
type=USER_AUTH msg=audit(1674675951.423:4254268): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=220.132.211.83 addr=220.132.211.83 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675953.547:4254269): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.132.211.83 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675954.089:4254270): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=220.132.211.83 addr=220.132.211.83 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675955.626:4254271): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.132.211.83 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675956.382:4254272): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=220.132.211.83 addr=220.132.211.83 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674675958.526:4254273): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.132.211.83 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674675958.738:4254274): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4640 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675958.738:4254275): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=4640 suid=74 rport=35097 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.132.211.83 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675958.739:4254276): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675958.740:4254277): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674675958.740:4254278): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674675958.740:4254279): pid=4638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.132.211.83 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674675961.334:4254280): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674675961.335:4254281): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674675961.336:4254282): pid=4692 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258444 res=1
type=USER_START msg=audit(1674675961.369:4254283): pid=4692 uid=0 auid=1055 ses=258444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674675961.373:4254284): pid=4692 uid=0 auid=1055 ses=258444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674675961.784:4254285): pid=4692 uid=0 auid=1055 ses=258444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674675961.787:4254286): pid=4692 uid=0 auid=1055 ses=258444 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676021.803:4254287): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676021.803:4254288): pid=4966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676021.803:4254289): pid=4966 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258445 res=1
type=USER_START msg=audit(1674676021.820:4254290): pid=4966 uid=0 auid=1055 ses=258445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676021.822:4254291): pid=4966 uid=0 auid=1055 ses=258445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676022.177:4254292): pid=4966 uid=0 auid=1055 ses=258445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676022.179:4254293): pid=4966 uid=0 auid=1055 ses=258445 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676081.192:4254294): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676081.192:4254295): pid=5165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676081.192:4254296): pid=5165 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258446 res=1
type=USER_START msg=audit(1674676081.206:4254297): pid=5165 uid=0 auid=1055 ses=258446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676081.207:4254298): pid=5165 uid=0 auid=1055 ses=258446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676081.553:4254299): pid=5165 uid=0 auid=1055 ses=258446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676081.555:4254300): pid=5165 uid=0 auid=1055 ses=258446 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674676087.608:4254301): avc: denied { read } for pid=5195 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674676087.608:4254301): avc: denied { open } for pid=5195 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676087.608:4254301): arch=c000003e syscall=2 success=yes exit=18 a0=55b40e92df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676087.608:4254301): proctitle="dovecot/auth"
type=AVC msg=audit(1674676087.608:4254302): avc: denied { getattr } for pid=5195 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676087.608:4254302): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe210ea670 a2=7ffe210ea670 a3=fffffc00 items=0 ppid=5547 pid=5195 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676087.608:4254302): proctitle="dovecot/auth"
type=AVC msg=audit(1674676089.817:4254303): avc: denied { name_connect } for pid=5195 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674676089.817:4254303): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe210ea460 a2=10 a3=7ffe210ea45c items=0 ppid=5547 pid=5195 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676089.817:4254303): proctitle="dovecot/auth"
type=AVC msg=audit(1674676089.848:4254304): avc: denied { write } for pid=5201 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674676089.848:4254304): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffea26dac00 a2=6e a3=63d18779 items=0 ppid=5547 pid=5201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676089.848:4254304): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674676141.570:4254305): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676141.571:4254306): pid=5376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676141.572:4254307): pid=5376 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258447 res=1
type=USER_START msg=audit(1674676141.588:4254308): pid=5376 uid=0 auid=1055 ses=258447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676141.588:4254309): pid=5376 uid=0 auid=1055 ses=258447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676141.938:4254310): pid=5376 uid=0 auid=1055 ses=258447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676141.940:4254311): pid=5376 uid=0 auid=1055 ses=258447 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676201.965:4254312): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676201.965:4254313): pid=5580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676201.965:4254314): pid=5580 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258448 res=1
type=USER_ACCT msg=audit(1674676201.965:4254315): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676201.965:4254316): pid=5579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676201.965:4254317): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676201.966:4254318): pid=5579 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258449 res=1
type=CRED_ACQ msg=audit(1674676201.966:4254319): pid=5582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676201.966:4254320): pid=5582 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258450 res=1
type=USER_ACCT msg=audit(1674676201.967:4254321): pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676201.967:4254322): pid=5581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676201.967:4254323): pid=5581 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258451 res=1
type=USER_START msg=audit(1674676202.148:4254324): pid=5582 uid=0 auid=1055 ses=258450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676202.148:4254325): pid=5579 uid=0 auid=0 ses=258449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676202.150:4254326): pid=5579 uid=0 auid=0 ses=258449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676202.150:4254327): pid=5582 uid=0 auid=1055 ses=258450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676202.152:4254328): pid=5581 uid=0 auid=0 ses=258451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676202.152:4254329): pid=5581 uid=0 auid=0 ses=258451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676202.154:4254330): pid=5580 uid=0 auid=0 ses=258448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676202.156:4254331): pid=5580 uid=0 auid=0 ses=258448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676202.210:4254332): pid=5579 uid=0 auid=0 ses=258449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676202.221:4254333): pid=5579 uid=0 auid=0 ses=258449 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676202.267:4254334): pid=5581 uid=0 auid=0 ses=258451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676202.272:4254335): pid=5581 uid=0 auid=0 ses=258451 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676202.481:4254336): pid=5582 uid=0 auid=1055 ses=258450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676202.483:4254337): pid=5582 uid=0 auid=1055 ses=258450 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676205.499:4254338): pid=5580 uid=0 auid=0 ses=258448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676205.501:4254339): pid=5580 uid=0 auid=0 ses=258448 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674676208.678:4254340): avc: denied { write } for pid=5494 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674676208.678:4254340): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff0079dd40 a2=6e a3=63d187f0 items=0 ppid=5547 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676208.678:4254340): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674676261.524:4254341): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676261.524:4254342): pid=5903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676261.525:4254343): pid=5903 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258452 res=1
type=USER_START msg=audit(1674676261.545:4254344): pid=5903 uid=0 auid=1055 ses=258452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676261.547:4254345): pid=5903 uid=0 auid=1055 ses=258452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676261.796:4254346): pid=5903 uid=0 auid=1055 ses=258452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676261.798:4254347): pid=5903 uid=0 auid=1055 ses=258452 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674676319.368:4254348): avc: denied { name_connect } for pid=5487 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674676319.368:4254348): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcf1678d30 a2=10 a3=7ffcf1678d2c items=0 ppid=5547 pid=5487 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676319.368:4254348): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674676320.469:4254349): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674676320.469:4254349): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae854449010 items=0 ppid=6109 pid=6115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676320.469:4254349): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E3234382E3136372E323434002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674676321.811:4254350): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676321.812:4254351): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676321.812:4254352): pid=6120 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258453 res=1
type=USER_START msg=audit(1674676321.825:4254353): pid=6120 uid=0 auid=1055 ses=258453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676321.827:4254354): pid=6120 uid=0 auid=1055 ses=258453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676322.109:4254355): pid=6120 uid=0 auid=1055 ses=258453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676322.112:4254356): pid=6120 uid=0 auid=1055 ses=258453 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674676327.670:4254357): avc: denied { write } for pid=6150 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674676327.670:4254357): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd7f609330 a2=6e a3=63d18867 items=0 ppid=5547 pid=6150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676327.670:4254357): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674676381.126:4254358): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676381.127:4254359): pid=6347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676381.127:4254360): pid=6347 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258454 res=1
type=USER_START msg=audit(1674676381.143:4254361): pid=6347 uid=0 auid=1055 ses=258454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676381.144:4254362): pid=6347 uid=0 auid=1055 ses=258454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676381.390:4254363): pid=6347 uid=0 auid=1055 ses=258454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676381.392:4254364): pid=6347 uid=0 auid=1055 ses=258454 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676441.406:4254365): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676441.407:4254366): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676441.408:4254367): pid=6561 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258455 res=1
type=USER_START msg=audit(1674676441.421:4254368): pid=6561 uid=0 auid=1055 ses=258455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676441.423:4254369): pid=6561 uid=0 auid=1055 ses=258455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676441.732:4254370): pid=6561 uid=0 auid=1055 ses=258455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676441.733:4254371): pid=6561 uid=0 auid=1055 ses=258455 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674676455.885:4254372): avc: denied { read } for pid=6613 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674676455.885:4254372): avc: denied { open } for pid=6613 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676455.885:4254372): arch=c000003e syscall=2 success=yes exit=18 a0=557224c3df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=6613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676455.885:4254372): proctitle="dovecot/auth"
type=AVC msg=audit(1674676455.885:4254373): avc: denied { getattr } for pid=6613 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676455.885:4254373): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff57f90890 a2=7fff57f90890 a3=fffffc00 items=0 ppid=5547 pid=6613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676455.885:4254373): proctitle="dovecot/auth"
type=AVC msg=audit(1674676457.767:4254374): avc: denied { name_connect } for pid=6613 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674676457.767:4254374): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff57f90680 a2=10 a3=7fff57f9067c items=0 ppid=5547 pid=6613 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676457.767:4254374): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674676458.858:4254375): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674676458.858:4254375): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab18c015010 items=0 ppid=6621 pid=6626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676458.858:4254375): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E3234392E38392E313934002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674676467.162:4254376): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674676467.162:4254376): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b07c2371010 items=0 ppid=6675 pid=6680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676467.162:4254376): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E3139342E3134322E323331002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674676501.748:4254377): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676501.748:4254378): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676501.748:4254379): pid=6791 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676501.748:4254380): pid=6790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676501.748:4254381): pid=6791 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258456 res=1
type=LOGIN msg=audit(1674676501.749:4254382): pid=6790 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258457 res=1
type=USER_START msg=audit(1674676501.787:4254383): pid=6790 uid=0 auid=0 ses=258457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676501.787:4254384): pid=6791 uid=0 auid=1055 ses=258456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676501.788:4254385): pid=6791 uid=0 auid=1055 ses=258456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676501.789:4254386): pid=6790 uid=0 auid=0 ses=258457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676502.100:4254387): pid=6791 uid=0 auid=1055 ses=258456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676502.103:4254388): pid=6791 uid=0 auid=1055 ses=258456 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676505.130:4254389): pid=6790 uid=0 auid=0 ses=258457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676505.132:4254390): pid=6790 uid=0 auid=0 ses=258457 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674676555.154:4254391): avc: denied { read } for pid=7012 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674676555.154:4254391): avc: denied { open } for pid=7012 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676555.154:4254391): arch=c000003e syscall=2 success=yes exit=18 a0=56163bf2bf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=7012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676555.154:4254391): proctitle="dovecot/auth"
type=AVC msg=audit(1674676555.154:4254392): avc: denied { getattr } for pid=7012 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676555.154:4254392): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd8893cbb0 a2=7ffd8893cbb0 a3=fffffc00 items=0 ppid=5547 pid=7012 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676555.154:4254392): proctitle="dovecot/auth"
type=AVC msg=audit(1674676555.676:4254393): avc: denied { name_connect } for pid=7012 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674676555.676:4254393): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd8893c9a0 a2=10 a3=7ffd8893c99c items=0 ppid=5547 pid=7012 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676555.676:4254393): proctitle="dovecot/auth"
type=AVC msg=audit(1674676555.710:4254394): avc: denied { write } for pid=7042 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674676555.710:4254394): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc7283c330 a2=6e a3=63d1894b items=0 ppid=5547 pid=7042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676555.710:4254394): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674676561.152:4254395): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676561.152:4254396): pid=7115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676561.153:4254397): pid=7115 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258458 res=1
type=USER_START msg=audit(1674676561.170:4254398): pid=7115 uid=0 auid=1055 ses=258458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676561.172:4254399): pid=7115 uid=0 auid=1055 ses=258458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676561.448:4254400): pid=7115 uid=0 auid=1055 ses=258458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676561.451:4254401): pid=7115 uid=0 auid=1055 ses=258458 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674676602.763:4254402): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674676602.763:4254402): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b42e8b5f010 items=0 ppid=7274 pid=7279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676602.763:4254402): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138332E36372E33392E3730002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543139
type=AVC msg=audit(1674676610.079:4254403): avc: denied { write } for pid=7042 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674676610.079:4254403): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc7283c330 a2=6e a3=63d18982 items=0 ppid=5547 pid=7042 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676610.079:4254403): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674676621.474:4254404): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676621.474:4254405): pid=7343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676621.475:4254406): pid=7343 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258459 res=1
type=USER_START msg=audit(1674676621.490:4254407): pid=7343 uid=0 auid=1055 ses=258459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676621.492:4254408): pid=7343 uid=0 auid=1055 ses=258459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676621.789:4254409): pid=7343 uid=0 auid=1055 ses=258459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676621.792:4254410): pid=7343 uid=0 auid=1055 ses=258459 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674676644.594:4254411): avc: denied { name_connect } for pid=7012 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674676644.594:4254411): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd8893c9a0 a2=10 a3=7ffd8893c99c items=0 ppid=5547 pid=7012 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676644.594:4254411): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674676645.682:4254412): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674676645.682:4254412): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b57d64e3010 items=0 ppid=7441 pid=7446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676645.682:4254412): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E31362E31322E3537002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431393A
type=NETFILTER_CFG msg=audit(1674676664.533:4254413): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674676664.533:4254413): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2814aac010 items=0 ppid=7501 pid=7506 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676664.533:4254413): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3134362E3132322E3530002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=CRYPTO_KEY_USER msg=audit(1674676666.363:4254414): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674676666.363:4254415): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674676666.363:4254416): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674676666.587:4254417): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=7515 suid=74 rport=60185 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=222.119.163.32 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674676666.587:4254418): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=7515 suid=74 rport=60185 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=222.119.163.32 terminal=? res=success'
type=USER_AUTH msg=audit(1674676667.990:4254419): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=222.119.163.32 addr=222.119.163.32 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674676670.078:4254420): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.119.163.32 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674676670.965:4254421): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7515 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674676670.965:4254422): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7515 suid=74 rport=60185 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=222.119.163.32 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674676670.966:4254423): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674676670.966:4254424): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674676670.966:4254425): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7512 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674676670.966:4254426): pid=7512 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.119.163.32 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674676681.807:4254427): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676681.807:4254428): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676681.807:4254429): pid=7565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676681.807:4254430): pid=7566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676681.808:4254431): pid=7566 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258460 res=1
type=LOGIN msg=audit(1674676681.808:4254432): pid=7565 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258461 res=1
type=USER_START msg=audit(1674676681.843:4254433): pid=7565 uid=0 auid=0 ses=258461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676681.844:4254434): pid=7566 uid=0 auid=1055 ses=258460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676681.846:4254435): pid=7566 uid=0 auid=1055 ses=258460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676681.846:4254436): pid=7565 uid=0 auid=0 ses=258461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676681.899:4254437): pid=7565 uid=0 auid=0 ses=258461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676681.901:4254438): pid=7565 uid=0 auid=0 ses=258461 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676682.126:4254439): pid=7566 uid=0 auid=1055 ses=258460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676682.128:4254440): pid=7566 uid=0 auid=1055 ses=258460 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674676701.326:4254441): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674676701.326:4254441): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae0272d0010 items=0 ppid=7652 pid=7657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676701.326:4254441): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3136392E38392E323438002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365431
type=USER_ACCT msg=audit(1674676741.144:4254442): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676741.144:4254443): pid=7803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676741.145:4254444): pid=7803 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258462 res=1
type=USER_START msg=audit(1674676741.162:4254445): pid=7803 uid=0 auid=1055 ses=258462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676741.163:4254446): pid=7803 uid=0 auid=1055 ses=258462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676741.516:4254447): pid=7803 uid=0 auid=1055 ses=258462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676741.517:4254448): pid=7803 uid=0 auid=1055 ses=258462 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676801.532:4254449): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676801.533:4254450): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676801.533:4254451): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676801.533:4254452): pid=8003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676801.533:4254453): pid=8005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676801.533:4254454): pid=8004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676801.533:4254455): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676801.533:4254456): pid=8003 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258463 res=1
type=LOGIN msg=audit(1674676801.533:4254457): pid=8005 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258464 res=1
type=CRED_ACQ msg=audit(1674676801.533:4254458): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676801.533:4254459): pid=8004 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258465 res=1
type=LOGIN msg=audit(1674676801.533:4254460): pid=8002 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258466 res=1
type=USER_START msg=audit(1674676801.641:4254461): pid=8002 uid=0 auid=0 ses=258466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676801.641:4254462): pid=8003 uid=0 auid=0 ses=258463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676801.642:4254463): pid=8004 uid=0 auid=0 ses=258465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676801.642:4254464): pid=8005 uid=0 auid=1055 ses=258464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676801.643:4254465): pid=8005 uid=0 auid=1055 ses=258464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676801.644:4254466): pid=8003 uid=0 auid=0 ses=258463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676801.647:4254467): pid=8004 uid=0 auid=0 ses=258465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676801.650:4254468): pid=8002 uid=0 auid=0 ses=258466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676801.679:4254469): pid=8002 uid=0 auid=0 ses=258466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676801.682:4254470): pid=8002 uid=0 auid=0 ses=258466 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676801.789:4254471): pid=8003 uid=0 auid=0 ses=258463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676801.793:4254472): pid=8003 uid=0 auid=0 ses=258463 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676802.133:4254473): pid=8005 uid=0 auid=1055 ses=258464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676802.136:4254474): pid=8005 uid=0 auid=1055 ses=258464 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676805.114:4254475): pid=8004 uid=0 auid=0 ses=258465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676805.116:4254476): pid=8004 uid=0 auid=0 ses=258465 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676861.133:4254477): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676861.133:4254478): pid=8214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676861.133:4254479): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676861.134:4254480): pid=8213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676861.134:4254481): pid=8214 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258467 res=1
type=LOGIN msg=audit(1674676861.134:4254482): pid=8213 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258468 res=1
type=USER_START msg=audit(1674676861.159:4254483): pid=8214 uid=0 auid=1055 ses=258467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674676861.160:4254484): pid=8213 uid=0 auid=0 ses=258468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676861.161:4254485): pid=8214 uid=0 auid=1055 ses=258467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676861.161:4254486): pid=8213 uid=0 auid=0 ses=258468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676861.187:4254487): pid=8213 uid=0 auid=0 ses=258468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676861.190:4254488): pid=8213 uid=0 auid=0 ses=258468 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676861.468:4254489): pid=8214 uid=0 auid=1055 ses=258467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676861.470:4254490): pid=8214 uid=0 auid=1055 ses=258467 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674676862.207:4254491): avc: denied { read } for pid=8261 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674676862.207:4254491): avc: denied { open } for pid=8261 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676862.207:4254491): arch=c000003e syscall=2 success=yes exit=18 a0=5612b04e2f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=8261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676862.207:4254491): proctitle="dovecot/auth"
type=AVC msg=audit(1674676862.207:4254492): avc: denied { getattr } for pid=8261 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676862.207:4254492): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffeb5206ca0 a2=7ffeb5206ca0 a3=fffffc00 items=0 ppid=5547 pid=8261 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676862.207:4254492): proctitle="dovecot/auth"
type=AVC msg=audit(1674676862.876:4254493): avc: denied { name_connect } for pid=8261 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674676862.876:4254493): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffeb5206a90 a2=10 a3=7ffeb5206a8c items=0 ppid=5547 pid=8261 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676862.876:4254493): proctitle="dovecot/auth"
type=AVC msg=audit(1674676862.911:4254494): avc: denied { write } for pid=8291 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674676862.911:4254494): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc83c14630 a2=6e a3=63d18a7e items=0 ppid=5547 pid=8291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676862.911:4254494): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674676890.937:4254495): avc: denied { read append } for pid=8444 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674676890.937:4254495): avc: denied { open } for pid=8444 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676890.937:4254495): arch=c000003e syscall=2 success=yes exit=8 a0=55726edcaa60 a1=402 a2=7ffc1c9112d0 a3=7ffc1c910d60 items=0 ppid=5547 pid=8444 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676890.937:4254495): proctitle="dovecot/imap"
type=AVC msg=audit(1674676890.937:4254496): avc: denied { getattr } for pid=8444 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676890.937:4254496): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc1c911230 a2=7ffc1c911230 a3=7ffc1c910ca0 items=0 ppid=5547 pid=8444 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676890.937:4254496): proctitle="dovecot/imap"
type=AVC msg=audit(1674676890.937:4254497): avc: denied { write } for pid=8444 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676890.937:4254497): arch=c000003e syscall=2 success=yes exit=10 a0=55726edcf990 a1=2 a2=7ffc1c910fd0 a3=7ffc1c910a60 items=0 ppid=5547 pid=8444 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676890.937:4254497): proctitle="dovecot/imap"
type=AVC msg=audit(1674676890.937:4254498): avc: denied { lock } for pid=8444 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676890.937:4254498): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc1c910ed0 a3=63d18a9a items=0 ppid=5547 pid=8444 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676890.937:4254498): proctitle="dovecot/imap"
type=AVC msg=audit(1674676890.938:4254499): avc: denied { read } for pid=8444 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674676890.938:4254499): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55726edf82f8 a2=90800 a3=0 items=0 ppid=5547 pid=8444 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676890.938:4254499): proctitle="dovecot/imap"
type=AVC msg=audit(1674676890.939:4254500): avc: denied { getattr } for pid=8444 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674676890.939:4254500): arch=c000003e syscall=4 success=yes exit=0 a0=55726edbaa60 a1=7ffc1c911280 a2=7ffc1c911280 a3=6f632e6f72676173 items=0 ppid=5547 pid=8444 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676890.939:4254500): proctitle="dovecot/imap"
type=AVC msg=audit(1674676898.052:4254501): avc: denied { write } for pid=8459 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674676898.052:4254501): arch=c000003e syscall=21 success=yes exit=0 a0=56226329e4c0 a1=2 a2=7b48 a3=7fff1cfb2660 items=0 ppid=5547 pid=8459 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674676898.052:4254501): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674676921.491:4254502): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676921.491:4254503): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676921.493:4254504): pid=8540 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258469 res=1
type=USER_START msg=audit(1674676921.511:4254505): pid=8540 uid=0 auid=1055 ses=258469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676921.513:4254506): pid=8540 uid=0 auid=1055 ses=258469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676921.849:4254507): pid=8540 uid=0 auid=1055 ses=258469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676921.850:4254508): pid=8540 uid=0 auid=1055 ses=258469 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674676981.868:4254509): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674676981.868:4254510): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674676981.868:4254511): pid=8728 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258470 res=1
type=USER_START msg=audit(1674676981.888:4254512): pid=8728 uid=0 auid=1055 ses=258470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674676981.889:4254513): pid=8728 uid=0 auid=1055 ses=258470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674676982.180:4254514): pid=8728 uid=0 auid=1055 ses=258470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674676982.182:4254515): pid=8728 uid=0 auid=1055 ses=258470 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677041.196:4254516): pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677041.196:4254517): pid=8912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677041.196:4254518): pid=8912 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258471 res=1
type=USER_START msg=audit(1674677041.207:4254519): pid=8912 uid=0 auid=1055 ses=258471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677041.208:4254520): pid=8912 uid=0 auid=1055 ses=258471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677041.439:4254521): pid=8912 uid=0 auid=1055 ses=258471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677041.440:4254522): pid=8912 uid=0 auid=1055 ses=258471 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677092.822:4254523): avc: denied { read } for pid=9075 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674677092.822:4254523): avc: denied { open } for pid=9075 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677092.822:4254523): arch=c000003e syscall=2 success=yes exit=18 a0=557197219f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=9075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677092.822:4254523): proctitle="dovecot/auth"
type=AVC msg=audit(1674677092.822:4254524): avc: denied { getattr } for pid=9075 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677092.822:4254524): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffefb039720 a2=7ffefb039720 a3=fffffc00 items=0 ppid=5547 pid=9075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677092.822:4254524): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674677101.454:4254525): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677101.455:4254526): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677101.455:4254527): pid=9104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677101.455:4254528): pid=9104 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258472 res=1
type=CRED_ACQ msg=audit(1674677101.455:4254529): pid=9106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677101.455:4254530): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677101.455:4254531): pid=9106 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258473 res=1
type=CRED_ACQ msg=audit(1674677101.455:4254532): pid=9105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677101.456:4254533): pid=9105 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258474 res=1
type=USER_START msg=audit(1674677101.498:4254534): pid=9106 uid=0 auid=1055 ses=258473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674677101.498:4254535): pid=9105 uid=0 auid=0 ses=258474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677101.499:4254536): pid=9106 uid=0 auid=1055 ses=258473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674677101.500:4254537): pid=9104 uid=0 auid=0 ses=258472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677101.500:4254538): pid=9105 uid=0 auid=0 ses=258474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677101.501:4254539): pid=9104 uid=0 auid=0 ses=258472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677101.582:4254540): pid=9105 uid=0 auid=0 ses=258474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677101.587:4254541): pid=9105 uid=0 auid=0 ses=258474 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677101.800:4254542): pid=9106 uid=0 auid=1055 ses=258473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677101.801:4254543): pid=9106 uid=0 auid=1055 ses=258473 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677104.841:4254544): pid=9104 uid=0 auid=0 ses=258472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677104.844:4254545): pid=9104 uid=0 auid=0 ses=258472 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677130.795:4254546): avc: denied { name_connect } for pid=9075 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674677130.795:4254546): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffefb039510 a2=10 a3=7ffefb03950c items=0 ppid=5547 pid=9075 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677130.795:4254546): proctitle="dovecot/auth"
type=AVC msg=audit(1674677130.830:4254547): avc: denied { write } for pid=9226 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674677130.830:4254547): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffca8e37640 a2=6e a3=63d18b8a items=0 ppid=5547 pid=9226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677130.830:4254547): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674677151.016:4254548): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674677151.016:4254548): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b7dde0cd010 items=0 ppid=9282 pid=9287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677151.016:4254548): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231392E3132392E39362E32002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543230
type=USER_ACCT msg=audit(1674677161.861:4254549): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677161.861:4254550): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677161.862:4254551): pid=9330 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258475 res=1
type=USER_START msg=audit(1674677161.880:4254552): pid=9330 uid=0 auid=1055 ses=258475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677161.881:4254553): pid=9330 uid=0 auid=1055 ses=258475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677162.126:4254554): pid=9330 uid=0 auid=1055 ses=258475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677162.128:4254555): pid=9330 uid=0 auid=1055 ses=258475 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677164.535:4254556): avc: denied { name_connect } for pid=9075 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674677164.535:4254556): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffefb039510 a2=10 a3=7ffefb03950c items=0 ppid=5547 pid=9075 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677164.535:4254556): proctitle="dovecot/auth"
type=AVC msg=audit(1674677164.547:4254557): avc: denied { write } for pid=9226 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674677164.547:4254557): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffca8e37640 a2=6e a3=63d18bac items=0 ppid=5547 pid=9226 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677164.547:4254557): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674677218.259:4254558): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677218.260:4254559): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677218.260:4254560): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9621 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677218.423:4254561): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=9621 suid=74 rport=47697 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677218.423:4254562): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=9621 suid=74 rport=47697 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=USER_AUTH msg=audit(1674677219.586:4254563): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=62.233.50.248 addr=62.233.50.248 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674677221.150:4254564): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677221.150:4254565): pid=9632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677221.151:4254566): pid=9632 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258476 res=1
type=USER_START msg=audit(1674677221.172:4254567): pid=9632 uid=0 auid=1055 ses=258476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677221.174:4254568): pid=9632 uid=0 auid=1055 ses=258476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677221.428:4254569): pid=9632 uid=0 auid=1055 ses=258476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677221.430:4254570): pid=9632 uid=0 auid=1055 ses=258476 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674677221.456:4254571): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674677221.621:4254572): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9621 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677221.621:4254573): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9621 suid=74 rport=47697 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677221.623:4254574): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677221.623:4254575): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677221.624:4254576): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9620 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674677221.624:4254577): pid=9620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=62.233.50.248 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674677224.731:4254578): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677224.731:4254579): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677224.731:4254580): pid=9650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677225.028:4254581): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=9650 suid=74 rport=42898 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=198.199.93.44 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677225.029:4254582): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=9650 suid=74 rport=42898 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=198.199.93.44 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677234.719:4254583): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9650 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677234.719:4254584): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9650 suid=74 rport=42898 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=198.199.93.44 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677234.720:4254585): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677234.720:4254586): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677234.720:4254587): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674677234.720:4254588): pid=9649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=198.199.93.44 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674677281.444:4254589): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677281.445:4254590): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677281.445:4254591): pid=9820 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258477 res=1
type=USER_START msg=audit(1674677281.459:4254592): pid=9820 uid=0 auid=1055 ses=258477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677281.461:4254593): pid=9820 uid=0 auid=1055 ses=258477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677281.681:4254594): pid=9820 uid=0 auid=1055 ses=258477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677281.682:4254595): pid=9820 uid=0 auid=1055 ses=258477 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677341.695:4254596): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677341.695:4254597): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677341.696:4254598): pid=10003 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677341.696:4254599): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677341.696:4254601): pid=10002 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258479 res=1
type=LOGIN msg=audit(1674677341.696:4254600): pid=10003 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258478 res=1
type=USER_START msg=audit(1674677341.723:4254602): pid=10003 uid=0 auid=1055 ses=258478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674677341.723:4254603): pid=10002 uid=0 auid=0 ses=258479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677341.724:4254604): pid=10003 uid=0 auid=1055 ses=258478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677341.725:4254605): pid=10002 uid=0 auid=0 ses=258479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677341.963:4254606): pid=10003 uid=0 auid=1055 ses=258478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677341.966:4254607): pid=10003 uid=0 auid=1055 ses=258478 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677343.039:4254608): pid=10002 uid=0 auid=0 ses=258479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677343.041:4254609): pid=10002 uid=0 auid=0 ses=258479 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677401.054:4254610): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677401.054:4254611): pid=10200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677401.054:4254612): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677401.054:4254613): pid=10199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677401.054:4254614): pid=10200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677401.055:4254615): pid=10198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677401.055:4254617): pid=10199 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258480 res=1
type=LOGIN msg=audit(1674677401.055:4254616): pid=10200 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258481 res=1
type=LOGIN msg=audit(1674677401.055:4254618): pid=10198 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258482 res=1
type=USER_START msg=audit(1674677401.097:4254619): pid=10200 uid=0 auid=1055 ses=258481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674677401.097:4254620): pid=10198 uid=0 auid=0 ses=258482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677401.099:4254621): pid=10198 uid=0 auid=0 ses=258482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674677401.099:4254622): pid=10199 uid=0 auid=0 ses=258480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677401.100:4254623): pid=10200 uid=0 auid=1055 ses=258481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677401.101:4254624): pid=10199 uid=0 auid=0 ses=258480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677401.124:4254625): pid=10198 uid=0 auid=0 ses=258482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677401.126:4254626): pid=10198 uid=0 auid=0 ses=258482 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677401.394:4254627): pid=10200 uid=0 auid=1055 ses=258481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677401.397:4254628): pid=10200 uid=0 auid=1055 ses=258481 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677404.039:4254629): avc: denied { read } for pid=10230 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674677404.039:4254629): avc: denied { open } for pid=10230 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677404.039:4254629): arch=c000003e syscall=2 success=yes exit=18 a0=5589b2ae2f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=10230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677404.039:4254629): proctitle="dovecot/auth"
type=AVC msg=audit(1674677404.039:4254630): avc: denied { getattr } for pid=10230 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677404.039:4254630): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffebccdd980 a2=7ffebccdd980 a3=fffffc00 items=0 ppid=5547 pid=10230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677404.039:4254630): proctitle="dovecot/auth"
type=CRED_DISP msg=audit(1674677404.414:4254631): pid=10199 uid=0 auid=0 ses=258480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677404.416:4254632): pid=10199 uid=0 auid=0 ses=258480 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677407.155:4254633): avc: denied { name_connect } for pid=10230 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674677407.155:4254633): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffebccdd770 a2=10 a3=7ffebccdd76c items=0 ppid=5547 pid=10230 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677407.155:4254633): proctitle="dovecot/auth"
type=AVC msg=audit(1674677407.191:4254634): avc: denied { write } for pid=10242 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674677407.191:4254634): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc2d5de3d0 a2=6e a3=63d18c9f items=0 ppid=5547 pid=10242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677407.191:4254634): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674677427.295:4254635): pid=10324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677427.295:4254636): pid=10324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677427.295:4254637): pid=10324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10324 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677427.924:4254638): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=10324 suid=74 rport=50386 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677427.924:4254639): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=10324 suid=74 rport=50386 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674677428.699:4254640): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674677430.591:4254641): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674677430.738:4254642): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10324 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677430.739:4254643): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=10324 suid=74 rport=50386 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677430.740:4254644): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677430.740:4254645): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677430.740:4254646): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10321 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674677430.740:4254647): pid=10321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674677461.437:4254648): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677461.437:4254649): pid=10442 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677461.437:4254650): pid=10442 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258483 res=1
type=USER_START msg=audit(1674677461.459:4254651): pid=10442 uid=0 auid=1055 ses=258483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677461.461:4254652): pid=10442 uid=0 auid=1055 ses=258483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677461.799:4254653): pid=10442 uid=0 auid=1055 ses=258483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677461.801:4254654): pid=10442 uid=0 auid=1055 ses=258483 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677521.815:4254655): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677521.815:4254656): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677521.816:4254657): pid=10659 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258484 res=1
type=USER_START msg=audit(1674677521.827:4254658): pid=10659 uid=0 auid=1055 ses=258484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677521.829:4254659): pid=10659 uid=0 auid=1055 ses=258484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677522.073:4254660): pid=10659 uid=0 auid=1055 ses=258484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677522.076:4254661): pid=10659 uid=0 auid=1055 ses=258484 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677536.046:4254662): avc: denied { read } for pid=10724 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674677536.046:4254662): avc: denied { open } for pid=10724 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677536.046:4254662): arch=c000003e syscall=2 success=yes exit=18 a0=55b562a9af70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=10724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677536.046:4254662): proctitle="dovecot/auth"
type=AVC msg=audit(1674677536.046:4254663): avc: denied { getattr } for pid=10724 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677536.046:4254663): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc9d4ec660 a2=7ffc9d4ec660 a3=fffffc00 items=0 ppid=5547 pid=10724 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677536.046:4254663): proctitle="dovecot/auth"
type=AVC msg=audit(1674677536.577:4254664): avc: denied { name_connect } for pid=10724 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674677536.577:4254664): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc9d4ec450 a2=10 a3=7ffc9d4ec44c items=0 ppid=5547 pid=10724 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677536.577:4254664): proctitle="dovecot/auth"
type=AVC msg=audit(1674677536.609:4254665): avc: denied { write } for pid=10754 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674677536.609:4254665): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffaef070e0 a2=6e a3=63d18d20 items=0 ppid=5547 pid=10754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677536.609:4254665): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674677581.092:4254666): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677581.092:4254667): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677581.092:4254668): pid=10953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677581.092:4254669): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677581.092:4254670): pid=10953 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258485 res=1
type=LOGIN msg=audit(1674677581.092:4254671): pid=10954 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258486 res=1
type=USER_START msg=audit(1674677581.126:4254672): pid=10954 uid=0 auid=1055 ses=258486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674677581.127:4254673): pid=10953 uid=0 auid=0 ses=258485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677581.128:4254674): pid=10954 uid=0 auid=1055 ses=258486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677581.128:4254675): pid=10953 uid=0 auid=0 ses=258485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677581.179:4254676): pid=10953 uid=0 auid=0 ses=258485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677581.181:4254677): pid=10953 uid=0 auid=0 ses=258485 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677581.417:4254678): pid=10954 uid=0 auid=1055 ses=258486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677581.419:4254679): pid=10954 uid=0 auid=1055 ses=258486 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674677629.310:4254680): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677629.311:4254681): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677629.311:4254682): pid=11122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677629.590:4254683): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=11122 suid=74 rport=60682 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.148.166.148 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677629.590:4254684): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=11122 suid=74 rport=60682 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.148.166.148 terminal=? res=success'
type=USER_AUTH msg=audit(1674677631.970:4254685): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=117.148.166.148 addr=117.148.166.148 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674677634.730:4254686): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=117.148.166.148 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674677635.014:4254687): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11122 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677635.014:4254688): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11122 suid=74 rport=60682 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=117.148.166.148 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677635.015:4254689): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677635.016:4254690): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677635.016:4254691): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11121 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674677635.016:4254692): pid=11121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=117.148.166.148 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674677641.439:4254693): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677641.440:4254694): pid=11157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677641.441:4254695): pid=11157 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258487 res=1
type=USER_START msg=audit(1674677641.470:4254696): pid=11157 uid=0 auid=1055 ses=258487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677641.472:4254697): pid=11157 uid=0 auid=1055 ses=258487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677641.755:4254698): pid=11157 uid=0 auid=1055 ses=258487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677641.757:4254699): pid=11157 uid=0 auid=1055 ses=258487 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677701.771:4254700): pid=11367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677701.771:4254702): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674677701.771:4254701): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677701.771:4254703): pid=11368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677701.771:4254704): pid=11367 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677701.771:4254705): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677701.771:4254706): pid=11368 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258488 res=1
type=LOGIN msg=audit(1674677701.771:4254707): pid=11367 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258489 res=1
type=LOGIN msg=audit(1674677701.771:4254708): pid=11366 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258490 res=1
type=USER_START msg=audit(1674677701.807:4254709): pid=11367 uid=0 auid=0 ses=258489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674677701.808:4254710): pid=11368 uid=0 auid=1055 ses=258488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674677701.808:4254711): pid=11366 uid=0 auid=0 ses=258490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677701.809:4254712): pid=11368 uid=0 auid=1055 ses=258488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677701.809:4254713): pid=11366 uid=0 auid=0 ses=258490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677701.809:4254714): pid=11367 uid=0 auid=0 ses=258489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677701.903:4254715): pid=11366 uid=0 auid=0 ses=258490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677701.908:4254716): pid=11366 uid=0 auid=0 ses=258490 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677702.166:4254717): pid=11368 uid=0 auid=1055 ses=258488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677702.168:4254718): pid=11368 uid=0 auid=1055 ses=258488 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677705.168:4254719): pid=11367 uid=0 auid=0 ses=258489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677705.170:4254720): pid=11367 uid=0 auid=0 ses=258489 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677707.677:4254721): avc: denied { read } for pid=11411 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674677707.677:4254721): avc: denied { open } for pid=11411 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677707.677:4254721): arch=c000003e syscall=2 success=yes exit=18 a0=555f3138ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=11411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677707.677:4254721): proctitle="dovecot/auth"
type=AVC msg=audit(1674677707.677:4254722): avc: denied { getattr } for pid=11411 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677707.677:4254722): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff4c3b7130 a2=7fff4c3b7130 a3=fffffc00 items=0 ppid=5547 pid=11411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677707.677:4254722): proctitle="dovecot/auth"
type=AVC msg=audit(1674677708.801:4254723): avc: denied { name_connect } for pid=11411 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674677708.801:4254723): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff4c3b6f20 a2=10 a3=7fff4c3b6f1c items=0 ppid=5547 pid=11411 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677708.801:4254723): proctitle="dovecot/auth"
type=AVC msg=audit(1674677708.829:4254724): avc: denied { write } for pid=11416 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674677708.829:4254724): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe75fbff60 a2=6e a3=63d18dcc items=0 ppid=5547 pid=11416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677708.829:4254724): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674677729.585:4254725): pid=11493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677729.586:4254726): pid=11493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677729.586:4254727): pid=11493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677729.816:4254728): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=11493 suid=74 rport=44186 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674677729.816:4254729): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=11493 suid=74 rport=44186 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=USER_AUTH msg=audit(1674677731.713:4254730): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674677733.200:4254731): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674677734.130:4254732): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11493 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677734.130:4254733): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=11493 suid=74 rport=44186 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677734.132:4254734): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=11492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677734.132:4254735): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=11492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674677734.132:4254736): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=11492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674677734.132:4254737): pid=11492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674677761.187:4254738): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677761.187:4254739): pid=11586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677761.189:4254740): pid=11586 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258491 res=1
type=USER_START msg=audit(1674677761.209:4254741): pid=11586 uid=0 auid=1055 ses=258491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677761.212:4254742): pid=11586 uid=0 auid=1055 ses=258491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677761.508:4254743): pid=11586 uid=0 auid=1055 ses=258491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677761.511:4254744): pid=11586 uid=0 auid=1055 ses=258491 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677771.141:4254745): avc: denied { name_connect } for pid=11411 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674677771.141:4254745): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff4c3b6f20 a2=10 a3=7fff4c3b6f1c items=0 ppid=5547 pid=11411 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677771.141:4254745): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674677772.224:4254746): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674677772.224:4254746): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad697664010 items=0 ppid=11625 pid=11630 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677772.224:4254746): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132342E3131382E3234392E323532002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=AVC msg=audit(1674677779.771:4254747): avc: denied { write } for pid=11655 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674677779.771:4254747): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc7e329810 a2=6e a3=63d18e13 items=0 ppid=5547 pid=11655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677779.771:4254747): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674677821.527:4254748): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677821.527:4254749): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677821.527:4254750): pid=11788 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258492 res=1
type=USER_START msg=audit(1674677821.544:4254751): pid=11788 uid=0 auid=1055 ses=258492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677821.546:4254752): pid=11788 uid=0 auid=1055 ses=258492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677821.800:4254753): pid=11788 uid=0 auid=1055 ses=258492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677821.801:4254754): pid=11788 uid=0 auid=1055 ses=258492 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677838.535:4254755): avc: denied { read append } for pid=11843 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674677838.535:4254755): avc: denied { open } for pid=11843 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677838.535:4254755): arch=c000003e syscall=2 success=yes exit=8 a0=562223c93a60 a1=402 a2=7ffe8a4845f0 a3=7ffe8a484060 items=0 ppid=5547 pid=11843 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677838.535:4254755): proctitle="dovecot/imap"
type=AVC msg=audit(1674677838.535:4254756): avc: denied { getattr } for pid=11843 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677838.535:4254756): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe8a484550 a2=7ffe8a484550 a3=7ffe8a483fa0 items=0 ppid=5547 pid=11843 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677838.535:4254756): proctitle="dovecot/imap"
type=AVC msg=audit(1674677838.535:4254757): avc: denied { write } for pid=11843 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677838.535:4254757): arch=c000003e syscall=2 success=yes exit=10 a0=562223c98960 a1=2 a2=7ffe8a4842f0 a3=7ffe8a483da0 items=0 ppid=5547 pid=11843 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677838.535:4254757): proctitle="dovecot/imap"
type=AVC msg=audit(1674677838.536:4254758): avc: denied { lock } for pid=11843 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677838.536:4254758): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe8a4841f0 a3=63d18e4e items=0 ppid=5547 pid=11843 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677838.536:4254758): proctitle="dovecot/imap"
type=AVC msg=audit(1674677838.536:4254759): avc: denied { read } for pid=11843 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674677838.536:4254759): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=562223cc1300 a2=90800 a3=0 items=0 ppid=5547 pid=11843 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677838.536:4254759): proctitle="dovecot/imap"
type=AVC msg=audit(1674677838.536:4254760): avc: denied { getattr } for pid=11843 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677838.536:4254760): arch=c000003e syscall=4 success=yes exit=0 a0=562223c83a60 a1=7ffe8a4845a0 a2=7ffe8a4845a0 a3=6f632e6f72676173 items=0 ppid=5547 pid=11843 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677838.536:4254760): proctitle="dovecot/imap"
type=AVC msg=audit(1674677842.686:4254761): avc: denied { read } for pid=11950 comm="imap" name="dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674677842.686:4254761): avc: denied { open } for pid=11950 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677842.686:4254761): arch=c000003e syscall=2 success=yes exit=8 a0=5596ab7e64b0 a1=0 a2=7b48 a3=2 items=0 ppid=5547 pid=11950 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677842.686:4254761): proctitle="dovecot/imap"
type=AVC msg=audit(1674677842.687:4254762): avc: denied { getattr } for pid=11950 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677842.687:4254762): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffcb3870db0 a2=7ffcb3870db0 a3=2 items=0 ppid=5547 pid=11950 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677842.687:4254762): proctitle="dovecot/imap"
type=AVC msg=audit(1674677842.687:4254763): avc: denied { append } for pid=11950 comm="imap" name="dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677842.687:4254763): arch=c000003e syscall=2 success=yes exit=8 a0=5596ab83a0d0 a1=402 a2=7ffcb3870d10 a3=7ffcb38707a0 items=0 ppid=5547 pid=11950 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677842.687:4254763): proctitle="dovecot/imap"
type=AVC msg=audit(1674677842.687:4254764): avc: denied { write } for pid=11950 comm="imap" name="dovecot.index" dev="vda1" ino=33481563 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677842.687:4254764): arch=c000003e syscall=2 success=yes exit=10 a0=5596ab839e10 a1=2 a2=7ffcb3870a10 a3=7ffcb38704a0 items=0 ppid=5547 pid=11950 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677842.687:4254764): proctitle="dovecot/imap"
type=AVC msg=audit(1674677842.688:4254765): avc: denied { write } for pid=11950 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674677842.688:4254765): arch=c000003e syscall=21 success=yes exit=0 a0=5596ab7e64c0 a1=2 a2=7b48 a3=7ffcb38708a0 items=0 ppid=5547 pid=11950 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677842.688:4254765): proctitle="dovecot/imap"
type=AVC msg=audit(1674677845.169:4254766): avc: denied { lock } for pid=11958 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674677845.169:4254766): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff02b91160 a3=63d18e55 items=0 ppid=5547 pid=11958 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677845.169:4254766): proctitle="dovecot/imap"
type=AVC msg=audit(1674677845.169:4254767): avc: denied { read } for pid=11958 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674677845.169:4254767): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55d9cf5bc300 a2=90800 a3=0 items=0 ppid=5547 pid=11958 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677845.169:4254767): proctitle="dovecot/imap"
type=NETFILTER_CFG msg=audit(1674677871.855:4254768): table=filter family=2 entries=1065
type=SYSCALL msg=audit(1674677871.855:4254768): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b823b96b010 items=0 ppid=12062 pid=12067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677871.855:4254768): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232312E3231342E35352E323230002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674677881.821:4254769): pid=12096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677881.821:4254770): pid=12096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677881.822:4254771): pid=12096 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258493 res=1
type=USER_START msg=audit(1674677881.839:4254772): pid=12096 uid=0 auid=1055 ses=258493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677881.843:4254773): pid=12096 uid=0 auid=1055 ses=258493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677882.183:4254774): pid=12096 uid=0 auid=1055 ses=258493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677882.185:4254775): pid=12096 uid=0 auid=1055 ses=258493 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674677894.799:4254776): avc: denied { write } for pid=11655 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674677894.799:4254776): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc7e329810 a2=6e a3=63d18e86 items=0 ppid=5547 pid=11655 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674677894.799:4254776): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674677941.200:4254777): pid=12306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674677941.200:4254778): pid=12306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674677941.200:4254779): pid=12306 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258494 res=1
type=USER_START msg=audit(1674677941.212:4254780): pid=12306 uid=0 auid=1055 ses=258494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674677941.213:4254781): pid=12306 uid=0 auid=1055 ses=258494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674677941.449:4254782): pid=12306 uid=0 auid=1055 ses=258494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674677941.451:4254783): pid=12306 uid=0 auid=1055 ses=258494 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678001.462:4254784): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678001.463:4254785): pid=12507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678001.463:4254786): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678001.463:4254787): pid=12507 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258495 res=1
type=CRED_ACQ msg=audit(1674678001.463:4254788): pid=12506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678001.463:4254789): pid=12506 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258496 res=1
type=USER_ACCT msg=audit(1674678001.465:4254790): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678001.465:4254791): pid=12505 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678001.465:4254792): pid=12505 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258497 res=1
type=USER_ACCT msg=audit(1674678001.466:4254793): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678001.467:4254794): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678001.467:4254795): pid=12504 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258498 res=1
type=USER_START msg=audit(1674678001.509:4254796): pid=12507 uid=0 auid=1055 ses=258495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678001.509:4254797): pid=12505 uid=0 auid=0 ses=258497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678001.510:4254798): pid=12506 uid=0 auid=0 ses=258496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678001.510:4254799): pid=12504 uid=0 auid=0 ses=258498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678001.511:4254800): pid=12506 uid=0 auid=0 ses=258496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678001.511:4254801): pid=12504 uid=0 auid=0 ses=258498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678001.512:4254802): pid=12505 uid=0 auid=0 ses=258497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678001.514:4254803): pid=12507 uid=0 auid=1055 ses=258495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678001.547:4254804): pid=12504 uid=0 auid=0 ses=258498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678001.550:4254805): pid=12504 uid=0 auid=0 ses=258498 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678001.605:4254806): pid=12506 uid=0 auid=0 ses=258496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678001.608:4254807): pid=12506 uid=0 auid=0 ses=258496 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678001.862:4254808): pid=12507 uid=0 auid=1055 ses=258495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678001.865:4254809): pid=12507 uid=0 auid=1055 ses=258495 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674678004.679:4254810): table=filter family=2 entries=1066
type=SYSCALL msg=audit(1674678004.679:4254810): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4f9fc06010 items=0 ppid=1588 pid=12544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.679:4254810): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231392E3133392E3134382E3130372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A33333A3538002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.683:4254811): table=filter family=2 entries=1065
type=SYSCALL msg=audit(1674678004.683:4254811): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4cb7ab1010 items=0 ppid=1588 pid=12545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.683:4254811): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E31372E3139322E3139352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A33363A3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.687:4254812): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674678004.687:4254812): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1dc7b03010 items=0 ppid=1588 pid=12546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.687:4254812): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E322E3135372E3130332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A33393A3131002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.692:4254813): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674678004.692:4254813): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ba4479a5010 items=0 ppid=1588 pid=12547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.692:4254813): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132342E3136372E32302E3131332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A34353A3030002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.697:4254814): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674678004.697:4254814): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b5d006a4010 items=0 ppid=1588 pid=12548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.697:4254814): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003135332E33352E3231352E362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A34373A3039002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.700:4254815): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674678004.700:4254815): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b35d6bf6010 items=0 ppid=1588 pid=12549 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.700:4254815): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003137312E3231322E3130322E33362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A34373A3338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.705:4254816): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674678004.705:4254816): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b7ea7571010 items=0 ppid=1588 pid=12550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.705:4254816): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131332E35392E3131392E39372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A34383A3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.709:4254817): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674678004.709:4254817): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9db7017010 items=0 ppid=1588 pid=12551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.709:4254817): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3232332E3234372E3231382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A34393A3239002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.714:4254818): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674678004.714:4254818): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b92055ac010 items=0 ppid=1588 pid=12552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.714:4254818): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035392E36322E3130382E36382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A34393A3338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.718:4254819): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674678004.718:4254819): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b39fff8d010 items=0 ppid=1588 pid=12553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.718:4254819): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E312E3131362E38322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355431393A35313A3530002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.721:4254820): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674678004.721:4254820): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6bfe141010 items=0 ppid=1588 pid=12554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.721:4254820): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E372E3234362E3230352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A30383A3531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.726:4254821): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674678004.726:4254821): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0f485bc010 items=0 ppid=1588 pid=12555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.726:4254821): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730038302E39342E39352E3230342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A30393A3432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.730:4254822): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674678004.730:4254822): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b775c90a010 items=0 ppid=1588 pid=12556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.730:4254822): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E39382E3131302E3231302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A31323A3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.735:4254823): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674678004.735:4254823): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b914169e010 items=0 ppid=1588 pid=12557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.735:4254823): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130312E3230352E32352E35392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A31343A3138002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.740:4254824): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674678004.740:4254824): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0ced014010 items=0 ppid=1588 pid=12558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.740:4254824): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134332E3131342E3231382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A31363A3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.744:4254825): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674678004.744:4254825): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aeaae662010 items=0 ppid=1588 pid=12559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.744:4254825): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E39322E32342E36392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A31373A3530002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674678004.749:4254826): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674678004.749:4254826): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b81eeec7010 items=0 ppid=1588 pid=12560 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678004.749:4254826): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E31372E3138372E34332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A31393A3539002D6A0044524F50
type=CRED_DISP msg=audit(1674678004.866:4254827): pid=12505 uid=0 auid=0 ses=258497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678004.867:4254828): pid=12505 uid=0 auid=0 ses=258497 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678061.888:4254829): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678061.888:4254830): pid=12736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678061.889:4254831): pid=12736 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258499 res=1
type=USER_START msg=audit(1674678061.906:4254832): pid=12736 uid=0 auid=1055 ses=258499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678061.908:4254833): pid=12736 uid=0 auid=1055 ses=258499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678062.184:4254834): pid=12736 uid=0 auid=1055 ses=258499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678062.186:4254835): pid=12736 uid=0 auid=1055 ses=258499 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678065.489:4254836): pid=12756 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.489:4254837): pid=12756 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.489:4254838): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.506:4254839): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.509:4254840): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.509:4254841): pid=12756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.532:4254842): pid=12762 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.532:4254843): pid=12762 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.532:4254844): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.546:4254845): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.549:4254846): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.549:4254847): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.571:4254848): pid=12767 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.572:4254849): pid=12767 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.572:4254850): pid=12767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.585:4254851): pid=12767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.589:4254852): pid=12767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.589:4254853): pid=12767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.711:4254854): pid=12774 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.711:4254855): pid=12774 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.711:4254856): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.725:4254857): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.728:4254858): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.728:4254859): pid=12774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.748:4254860): pid=12780 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.749:4254861): pid=12780 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.749:4254862): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.762:4254863): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.765:4254864): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.765:4254865): pid=12780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.785:4254866): pid=12783 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.785:4254867): pid=12783 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.785:4254868): pid=12783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.800:4254869): pid=12783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.803:4254870): pid=12783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.803:4254871): pid=12783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.833:4254872): pid=12790 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.833:4254873): pid=12790 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.833:4254874): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.848:4254875): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.851:4254876): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.851:4254877): pid=12790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.872:4254878): pid=12795 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.872:4254879): pid=12795 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.872:4254880): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.884:4254881): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.887:4254882): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.887:4254883): pid=12795 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.908:4254884): pid=12799 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.908:4254885): pid=12799 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.908:4254886): pid=12799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.923:4254887): pid=12799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.926:4254888): pid=12799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.926:4254889): pid=12799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.947:4254890): pid=12805 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.947:4254891): pid=12805 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.948:4254892): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678065.962:4254893): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678065.965:4254894): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678065.965:4254895): pid=12805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678065.987:4254896): pid=12810 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678065.987:4254897): pid=12810 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674678065.987:4254898): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678066.003:4254899): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678066.006:4254900): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678066.007:4254901): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678068.025:4254902): pid=12824 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678068.026:4254903): pid=12824 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674678068.026:4254904): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678068.039:4254905): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678068.093:4254906): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678068.093:4254907): pid=12824 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678068.123:4254908): pid=12831 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678068.123:4254909): pid=12831 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674678068.123:4254910): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678068.136:4254911): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678068.214:4254912): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678068.214:4254913): pid=12831 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678068.237:4254914): pid=12836 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678068.238:4254915): pid=12836 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F75736572735F66656174757265735F73657474696E677320757365722D313D7777776B61726574616B65727320757365722D323D636F6368696E7461786920757365722D333D6461727473696D7020757365722D343D61327A67726F757020757365722D353D6C61756E647279626F6E696661636520757365722D363D777777706D637265736F7572636520757365722D373D74726176656C626F6E696661636520757365722D383D777777726D73776C6C20757365722D393D6B6572616C61686F6C6920757365722D31303D7777777265736F7572636568756E746520757365722D31313D75676F7473636F6D20757365722D31323D7777776B6D616F726720757365722D31333D646973706F7365617420757365722D31343D72656D797361677220757365722D31353D776F6F647065636B20757365722D31363D7777776B6170696E20757365722D31373D76666D61737365747320757365722D31383D7777777465737475676F20757365722D31393D7368616C696E696A616D657320757365722D32303D706D637265736F757263657320757365722D32313D626F6E696661636567726F757020757365722D32323D77777765766D686F6E646120757365722D32333D7374726169676874637572766520757365722D32343D7777776C6574737374616C6B666F6F6420757365722D32353D6769667465726D616E20757365722D32363D70616C636F31323320757365722D32373D70686D6574616C7320757365722D32383D6B6F74746179616D63616C6C6472697620757365722D32393D7777776E6578696469676974616C20757365722D33303D6D7273636C65616E20666561747572652D313D66696C656D616E6167657220666561747572652D323D6261636B757020666561747572652D333D63726F6E20666561747572652D343D7068706D7961646D696E20666561747572652D353D6D7973716C20666561747572652D363D6D756C746970687020666561747572652D373D6164646F6E646F6D61696E7320666561747572652D383D737562646F6D61696E7320666561747572652D393D77656270726F7465637420666561747572652D31303D73736C696E7374616C6C20666561747572652D31313D77702D746F6F6C6B697420666561747572652D31323D77702D746F6F6C6B69742D64656C757865202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674678068.238:4254916): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678068.253:4254917): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678068.362:4254918): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678068.362:4254919): pid=12836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678068.398:4254920): pid=12844 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678068.398:4254921): pid=12844 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674678068.399:4254922): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678068.412:4254923): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678068.415:4254924): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678068.415:4254925): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678068.440:4254926): pid=12847 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678068.440:4254927): pid=12847 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D3637387543504D3055545069494C4D412E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674678068.440:4254928): pid=12847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678068.454:4254929): pid=12847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678068.457:4254930): pid=12847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678068.457:4254931): pid=12847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678068.478:4254932): pid=12851 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678068.479:4254933): pid=12851 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D3637387543504D3055545069494C4D412E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674678068.479:4254934): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678068.492:4254935): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678068.497:4254936): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678068.497:4254937): pid=12851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678068.518:4254938): pid=12856 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678068.518:4254939): pid=12856 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D3637387543504D3055545069494C4D412E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674678068.518:4254940): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678068.532:4254941): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678068.536:4254942): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678068.536:4254943): pid=12856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678068.556:4254944): pid=12862 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678068.557:4254945): pid=12862 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674678068.557:4254946): pid=12862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678068.573:4254947): pid=12862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678068.579:4254948): pid=12862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678068.579:4254949): pid=12862 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678069.102:4254950): pid=12871 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678069.102:4254951): pid=12871 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674678069.102:4254952): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678069.115:4254953): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678069.118:4254954): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678069.119:4254955): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678069.303:4254956): pid=12877 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678069.303:4254957): pid=12877 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674678069.303:4254958): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678069.316:4254959): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678069.320:4254960): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678069.320:4254961): pid=12877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678069.340:4254962): pid=12882 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678069.340:4254963): pid=12882 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674678069.340:4254964): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678069.354:4254965): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678069.357:4254966): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678069.357:4254967): pid=12882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678069.378:4254968): pid=12887 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678069.378:4254969): pid=12887 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674678069.378:4254970): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678069.392:4254971): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678069.396:4254972): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678069.396:4254973): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678069.422:4254974): pid=12892 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678069.422:4254975): pid=12892 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674678069.422:4254976): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678069.437:4254977): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678069.560:4254978): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678069.561:4254979): pid=12892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678070.346:4254980): pid=12899 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678070.346:4254981): pid=12899 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674678070.347:4254982): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678070.367:4254983): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678070.455:4254984): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678070.455:4254985): pid=12899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678070.496:4254986): pid=12905 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678070.496:4254987): pid=12905 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674678070.496:4254988): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678070.510:4254989): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678071.684:4254990): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678071.684:4254991): pid=12905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678071.875:4254992): pid=12916 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678071.876:4254993): pid=12916 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674678071.876:4254994): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678071.890:4254995): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678073.084:4254996): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678073.084:4254997): pid=12916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678073.288:4254998): pid=12929 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678073.289:4254999): pid=12929 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674678073.289:4255000): pid=12929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678073.305:4255001): pid=12929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678075.052:4255002): pid=12929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678075.052:4255003): pid=12929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678075.305:4255004): pid=12941 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678075.306:4255005): pid=12941 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674678075.306:4255006): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678075.319:4255007): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678076.507:4255008): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678076.507:4255009): pid=12941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678076.593:4255010): pid=12950 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678076.593:4255011): pid=12950 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674678076.593:4255012): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678076.606:4255013): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678076.974:4255014): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678076.974:4255015): pid=12950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678077.094:4255016): pid=12959 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678077.094:4255017): pid=12959 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F485950452026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F48595045202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674678077.094:4255018): pid=12959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678077.107:4255019): pid=12959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678079.266:4255020): pid=12959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678079.266:4255021): pid=12959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678079.511:4255022): pid=12984 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678079.511:4255023): pid=12984 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674678079.511:4255024): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678079.524:4255025): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678080.669:4255026): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678080.669:4255027): pid=12984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674678080.799:4255028): avc: denied { read } for pid=12997 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674678080.799:4255028): avc: denied { open } for pid=12997 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678080.799:4255028): arch=c000003e syscall=2 success=yes exit=18 a0=55a813917f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=12997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678080.799:4255028): proctitle="dovecot/auth"
type=AVC msg=audit(1674678080.799:4255029): avc: denied { getattr } for pid=12997 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678080.799:4255029): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdd2432db0 a2=7ffdd2432db0 a3=fffffc00 items=0 ppid=5547 pid=12997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678080.799:4255029): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674678080.874:4255030): pid=12998 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678080.875:4255031): pid=12998 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674678080.875:4255032): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678080.890:4255033): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674678082.007:4255034): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678082.007:4255035): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674678082.782:4255036): pid=13014 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674678082.782:4255037): pid=13014 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674678082.782:4255038): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674678082.796:4255039): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674678083.405:4255040): avc: denied { name_connect } for pid=12997 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674678083.405:4255040): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdd2432ba0 a2=10 a3=7ffdd2432b9c items=0 ppid=5547 pid=12997 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678083.405:4255040): proctitle="dovecot/auth"
type=USER_END msg=audit(1674678083.898:4255041): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674678083.898:4255042): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=NETFILTER_CFG msg=audit(1674678084.488:4255043): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674678084.488:4255043): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab704271010 items=0 ppid=13029 pid=13034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678084.488:4255043): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650033362E3131302E31352E313730002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=AVC msg=audit(1674678091.130:4255044): avc: denied { write } for pid=13072 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674678091.130:4255044): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffda389cc50 a2=6e a3=63d18f4b items=0 ppid=5547 pid=13072 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678091.130:4255044): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674678121.208:4255045): pid=13165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678121.208:4255046): pid=13165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678121.209:4255047): pid=13165 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258500 res=1
type=USER_START msg=audit(1674678121.226:4255048): pid=13165 uid=0 auid=1055 ses=258500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678121.228:4255049): pid=13165 uid=0 auid=1055 ses=258500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678121.518:4255050): pid=13165 uid=0 auid=1055 ses=258500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678121.520:4255051): pid=13165 uid=0 auid=1055 ses=258500 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678181.536:4255052): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678181.536:4255053): pid=13345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678181.536:4255054): pid=13345 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258501 res=1
type=USER_START msg=audit(1674678181.549:4255055): pid=13345 uid=0 auid=1055 ses=258501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678181.550:4255056): pid=13345 uid=0 auid=1055 ses=258501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678181.841:4255057): pid=13345 uid=0 auid=1055 ses=258501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678181.842:4255058): pid=13345 uid=0 auid=1055 ses=258501 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674678213.635:4255059): avc: denied { name_connect } for pid=13470 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674678213.635:4255059): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffcd5768220 a2=10 a3=7ffcd576821c items=0 ppid=5547 pid=13470 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678213.635:4255059): proctitle="dovecot/auth"
type=AVC msg=audit(1674678213.667:4255060): avc: denied { write } for pid=13501 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674678213.667:4255060): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffddaa9f370 a2=6e a3=63d18fc5 items=0 ppid=5547 pid=13501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678213.667:4255060): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674678236.948:4255061): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674678236.948:4255061): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b53a7a9a010 items=0 ppid=13618 pid=13623 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678236.948:4255061): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231392E3135312E3134342E323137002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674678241.862:4255062): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678241.862:4255063): pid=13636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678241.864:4255064): pid=13636 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258502 res=1
type=USER_START msg=audit(1674678241.883:4255065): pid=13636 uid=0 auid=1055 ses=258502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678241.885:4255066): pid=13636 uid=0 auid=1055 ses=258502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678242.153:4255067): pid=13636 uid=0 auid=1055 ses=258502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678242.155:4255068): pid=13636 uid=0 auid=1055 ses=258502 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678301.168:4255069): pid=13833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678301.168:4255070): pid=13832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678301.168:4255071): pid=13834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678301.168:4255072): pid=13832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678301.168:4255073): pid=13833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678301.168:4255074): pid=13834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678301.168:4255076): pid=13833 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258503 res=1
type=LOGIN msg=audit(1674678301.168:4255075): pid=13832 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258504 res=1
type=LOGIN msg=audit(1674678301.169:4255077): pid=13834 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258505 res=1
type=USER_START msg=audit(1674678301.201:4255078): pid=13833 uid=0 auid=0 ses=258503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678301.202:4255079): pid=13834 uid=0 auid=1055 ses=258505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678301.202:4255080): pid=13832 uid=0 auid=0 ses=258504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678301.202:4255081): pid=13834 uid=0 auid=1055 ses=258505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678301.204:4255082): pid=13833 uid=0 auid=0 ses=258503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678301.206:4255083): pid=13832 uid=0 auid=0 ses=258504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678301.372:4255084): pid=13832 uid=0 auid=0 ses=258504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678301.377:4255085): pid=13832 uid=0 auid=0 ses=258504 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678301.444:4255086): pid=13834 uid=0 auid=1055 ses=258505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678301.446:4255087): pid=13834 uid=0 auid=1055 ses=258505 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678304.544:4255088): pid=13833 uid=0 auid=0 ses=258503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678304.546:4255089): pid=13833 uid=0 auid=0 ses=258503 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678361.565:4255090): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678361.565:4255091): pid=14056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678361.567:4255092): pid=14056 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258506 res=1
type=USER_START msg=audit(1674678361.584:4255093): pid=14056 uid=0 auid=1055 ses=258506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678361.588:4255094): pid=14056 uid=0 auid=1055 ses=258506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678361.939:4255095): pid=14056 uid=0 auid=1055 ses=258506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678361.942:4255096): pid=14056 uid=0 auid=1055 ses=258506 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678421.958:4255097): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678421.958:4255098): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678421.959:4255099): pid=14275 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258507 res=1
type=USER_START msg=audit(1674678421.971:4255100): pid=14275 uid=0 auid=1055 ses=258507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678421.972:4255101): pid=14275 uid=0 auid=1055 ses=258507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678422.222:4255102): pid=14275 uid=0 auid=1055 ses=258507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678422.228:4255103): pid=14275 uid=0 auid=1055 ses=258507 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678481.242:4255105): pid=14468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678481.242:4255104): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678481.242:4255106): pid=14468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678481.242:4255107): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678481.243:4255109): pid=14469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258509 res=1
type=LOGIN msg=audit(1674678481.243:4255108): pid=14468 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258508 res=1
type=USER_START msg=audit(1674678481.270:4255111): pid=14468 uid=0 auid=0 ses=258508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678481.270:4255110): pid=14469 uid=0 auid=1055 ses=258509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678481.272:4255112): pid=14468 uid=0 auid=0 ses=258508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678481.272:4255113): pid=14469 uid=0 auid=1055 ses=258509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678481.327:4255114): pid=14468 uid=0 auid=0 ses=258508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678481.331:4255115): pid=14468 uid=0 auid=0 ses=258508 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678481.520:4255116): pid=14469 uid=0 auid=1055 ses=258509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678481.522:4255117): pid=14469 uid=0 auid=1055 ses=258509 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674678483.200:4255118): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674678483.200:4255119): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674678483.200:4255120): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674678484.487:4255121): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=14489 suid=74 rport=29240 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674678484.487:4255122): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=14489 suid=74 rport=29240 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=USER_AUTH msg=audit(1674678486.750:4255123): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674678488.552:4255124): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674678489.107:4255125): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14489 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674678489.107:4255126): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14489 suid=74 rport=29240 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674678489.108:4255127): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14488 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674678489.108:4255128): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14488 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674678489.108:4255129): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14488 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674678489.109:4255130): pid=14488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=AVC msg=audit(1674678508.540:4255131): avc: denied { read } for pid=14590 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674678508.540:4255131): avc: denied { open } for pid=14590 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678508.540:4255131): arch=c000003e syscall=2 success=yes exit=18 a0=55627f93df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=14590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678508.540:4255131): proctitle="dovecot/auth"
type=AVC msg=audit(1674678508.540:4255132): avc: denied { getattr } for pid=14590 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678508.540:4255132): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc861ea2a0 a2=7ffc861ea2a0 a3=fffffc00 items=0 ppid=5547 pid=14590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678508.540:4255132): proctitle="dovecot/auth"
type=AVC msg=audit(1674678512.242:4255133): avc: denied { name_connect } for pid=14590 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674678512.242:4255133): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc861ea090 a2=10 a3=7ffc861ea08c items=0 ppid=5547 pid=14590 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678512.242:4255133): proctitle="dovecot/auth"
type=AVC msg=audit(1674678512.269:4255134): avc: denied { write } for pid=14602 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674678512.269:4255134): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffa52f6890 a2=6e a3=63d190f0 items=0 ppid=5547 pid=14602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678512.269:4255134): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674678541.546:4255135): pid=14803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678541.546:4255136): pid=14803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678541.547:4255137): pid=14803 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258510 res=1
type=USER_START msg=audit(1674678541.568:4255138): pid=14803 uid=0 auid=1055 ses=258510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678541.570:4255139): pid=14803 uid=0 auid=1055 ses=258510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678541.808:4255140): pid=14803 uid=0 auid=1055 ses=258510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678541.811:4255141): pid=14803 uid=0 auid=1055 ses=258510 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678601.826:4255142): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678601.826:4255143): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678601.826:4255144): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678601.826:4255145): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678601.826:4255146): pid=15020 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678601.826:4255147): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678601.826:4255148): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678601.826:4255149): pid=15019 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258511 res=1
type=LOGIN msg=audit(1674678601.826:4255151): pid=15020 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258512 res=1
type=LOGIN msg=audit(1674678601.826:4255150): pid=15021 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258513 res=1
type=CRED_ACQ msg=audit(1674678601.826:4255152): pid=15022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678601.826:4255153): pid=15022 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258514 res=1
type=USER_START msg=audit(1674678601.876:4255154): pid=15021 uid=0 auid=0 ses=258513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678601.877:4255155): pid=15020 uid=0 auid=0 ses=258512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678601.877:4255156): pid=15022 uid=0 auid=1055 ses=258514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678601.878:4255157): pid=15019 uid=0 auid=0 ses=258511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678601.878:4255158): pid=15022 uid=0 auid=1055 ses=258514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678601.878:4255159): pid=15020 uid=0 auid=0 ses=258512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678601.879:4255160): pid=15019 uid=0 auid=0 ses=258511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678601.880:4255161): pid=15021 uid=0 auid=0 ses=258513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678601.921:4255162): pid=15019 uid=0 auid=0 ses=258511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678601.942:4255163): pid=15019 uid=0 auid=0 ses=258511 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678602.257:4255164): pid=15022 uid=0 auid=1055 ses=258514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678602.260:4255165): pid=15022 uid=0 auid=1055 ses=258514 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678602.498:4255166): pid=15020 uid=0 auid=0 ses=258512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678602.500:4255167): pid=15020 uid=0 auid=0 ses=258512 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678605.267:4255168): pid=15021 uid=0 auid=0 ses=258513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678605.269:4255169): pid=15021 uid=0 auid=0 ses=258513 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674678658.939:4255170): avc: denied { read } for pid=15245 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674678658.939:4255170): avc: denied { open } for pid=15245 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678658.939:4255170): arch=c000003e syscall=2 success=yes exit=18 a0=558efb045f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=15245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678658.939:4255170): proctitle="dovecot/auth"
type=AVC msg=audit(1674678658.939:4255171): avc: denied { getattr } for pid=15245 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678658.939:4255171): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe3fcd5280 a2=7ffe3fcd5280 a3=fffffc00 items=0 ppid=5547 pid=15245 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678658.939:4255171): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674678661.290:4255172): pid=15254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678661.290:4255173): pid=15254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678661.292:4255174): pid=15254 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258515 res=1
type=USER_START msg=audit(1674678661.312:4255175): pid=15254 uid=0 auid=1055 ses=258515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678661.313:4255176): pid=15254 uid=0 auid=1055 ses=258515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678661.569:4255177): pid=15254 uid=0 auid=1055 ses=258515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678661.571:4255178): pid=15254 uid=0 auid=1055 ses=258515 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674678667.015:4255179): avc: denied { name_connect } for pid=15245 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674678667.015:4255179): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe3fcd5070 a2=10 a3=7ffe3fcd506c items=0 ppid=5547 pid=15245 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678667.015:4255179): proctitle="dovecot/auth"
type=AVC msg=audit(1674678667.058:4255180): avc: denied { write } for pid=15284 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674678667.058:4255180): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc3e6c5ff0 a2=6e a3=63d1918b items=0 ppid=5547 pid=15284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678667.058:4255180): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674678679.060:4255181): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674678679.060:4255181): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b1368b81010 items=0 ppid=15321 pid=15326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678679.060:4255181): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E3234332E3135312E3334002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=USER_ACCT msg=audit(1674678721.590:4255182): pid=15469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678721.590:4255183): pid=15469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678721.590:4255184): pid=15469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258516 res=1
type=USER_START msg=audit(1674678721.606:4255185): pid=15469 uid=0 auid=1055 ses=258516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678721.608:4255186): pid=15469 uid=0 auid=1055 ses=258516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678721.873:4255187): pid=15469 uid=0 auid=1055 ses=258516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678721.874:4255188): pid=15469 uid=0 auid=1055 ses=258516 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674678726.548:4255189): avc: denied { name_connect } for pid=15245 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674678726.548:4255189): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe3fcd5070 a2=10 a3=7ffe3fcd506c items=0 ppid=5547 pid=15245 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678726.548:4255189): proctitle="dovecot/auth"
type=AVC msg=audit(1674678750.158:4255190): avc: denied { read append } for pid=15577 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674678750.158:4255190): avc: denied { open } for pid=15577 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678750.158:4255190): arch=c000003e syscall=2 success=yes exit=8 a0=557f52269a60 a1=402 a2=7ffdec828910 a3=7ffdec8283a0 items=0 ppid=5547 pid=15577 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678750.158:4255190): proctitle="dovecot/imap"
type=AVC msg=audit(1674678750.158:4255191): avc: denied { getattr } for pid=15577 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678750.158:4255191): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffdec828870 a2=7ffdec828870 a3=7ffdec8282e0 items=0 ppid=5547 pid=15577 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678750.158:4255191): proctitle="dovecot/imap"
type=AVC msg=audit(1674678750.158:4255192): avc: denied { write } for pid=15577 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678750.158:4255192): arch=c000003e syscall=2 success=yes exit=10 a0=557f5226e990 a1=2 a2=7ffdec828610 a3=7ffdec8280a0 items=0 ppid=5547 pid=15577 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678750.158:4255192): proctitle="dovecot/imap"
type=AVC msg=audit(1674678750.159:4255193): avc: denied { lock } for pid=15577 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678750.159:4255193): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffdec828510 a3=63d191de items=0 ppid=5547 pid=15577 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678750.159:4255193): proctitle="dovecot/imap"
type=AVC msg=audit(1674678750.159:4255194): avc: denied { read } for pid=15577 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674678750.159:4255194): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=557f52297300 a2=90800 a3=0 items=0 ppid=5547 pid=15577 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678750.159:4255194): proctitle="dovecot/imap"
type=AVC msg=audit(1674678750.160:4255195): avc: denied { getattr } for pid=15577 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678750.160:4255195): arch=c000003e syscall=4 success=yes exit=0 a0=557f52259a60 a1=7ffdec8288c0 a2=7ffdec8288c0 a3=6f632e6f72676173 items=0 ppid=5547 pid=15577 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678750.160:4255195): proctitle="dovecot/imap"
type=AVC msg=audit(1674678752.035:4255196): avc: denied { write } for pid=15585 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674678752.035:4255196): arch=c000003e syscall=21 success=yes exit=0 a0=55a53f2c64c0 a1=2 a2=7b48 a3=7ffe59d15ca0 items=0 ppid=5547 pid=15585 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678752.035:4255196): proctitle="dovecot/imap"
type=NETFILTER_CFG msg=audit(1674678757.657:4255197): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674678757.657:4255197): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6d24fde010 items=0 ppid=15601 pid=15606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678757.657:4255197): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130362E3131382E3131372E313939002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674678781.889:4255198): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678781.890:4255199): pid=15677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678781.890:4255200): pid=15677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258517 res=1
type=USER_START msg=audit(1674678781.905:4255201): pid=15677 uid=0 auid=1055 ses=258517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678781.907:4255202): pid=15677 uid=0 auid=1055 ses=258517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678782.152:4255203): pid=15677 uid=0 auid=1055 ses=258517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678782.154:4255204): pid=15677 uid=0 auid=1055 ses=258517 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678841.172:4255205): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678841.172:4255206): pid=15965 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678841.172:4255207): pid=15965 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258518 res=1
type=USER_START msg=audit(1674678841.186:4255208): pid=15965 uid=0 auid=1055 ses=258518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678841.188:4255209): pid=15965 uid=0 auid=1055 ses=258518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678841.425:4255210): pid=15965 uid=0 auid=1055 ses=258518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678841.427:4255211): pid=15965 uid=0 auid=1055 ses=258518 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674678894.151:4255212): avc: denied { write } for pid=16124 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674678894.151:4255212): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb24c34d0 a2=6e a3=63d1926e items=0 ppid=5547 pid=16124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678894.151:4255212): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674678894.183:4255213): avc: denied { read append } for pid=16123 comm="quota-status" name="maildirsize" dev="vda1" ino=53842228 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674678894.183:4255213): avc: denied { open } for pid=16123 comm="quota-status" path="/home/wwwletsstalkfood/mail/maildirsize" dev="vda1" ino=53842228 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674678894.183:4255213): arch=c000003e syscall=2 success=yes exit=16 a0=558852b82ef0 a1=402 a2=7fffc0a69650 a3=7f7953faa830 items=0 ppid=5547 pid=16123 auid=4294967295 uid=0 gid=1054 euid=1052 suid=0 fsuid=1052 egid=1054 sgid=1054 fsgid=1054 tty=(none) ses=4294967295 comm="quota-status" exe="/usr/libexec/dovecot/quota-status" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678894.183:4255213): proctitle=646F7665636F742F71756F74612D737461747573002D7000706F7374666978
type=USER_ACCT msg=audit(1674678901.439:4255214): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678901.439:4255215): pid=16155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678901.439:4255216): pid=16155 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258519 res=1
type=USER_ACCT msg=audit(1674678901.439:4255217): pid=16154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678901.439:4255218): pid=16154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678901.443:4255219): pid=16154 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258520 res=1
type=USER_ACCT msg=audit(1674678901.443:4255220): pid=16153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674678901.443:4255221): pid=16156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678901.443:4255222): pid=16153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678901.443:4255223): pid=16156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678901.444:4255224): pid=16153 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258521 res=1
type=LOGIN msg=audit(1674678901.444:4255225): pid=16156 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258522 res=1
type=USER_START msg=audit(1674678901.492:4255226): pid=16153 uid=0 auid=0 ses=258521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678901.492:4255227): pid=16154 uid=0 auid=0 ses=258520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678901.494:4255228): pid=16156 uid=0 auid=1055 ses=258522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678901.495:4255229): pid=16156 uid=0 auid=1055 ses=258522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674678901.495:4255230): pid=16155 uid=0 auid=0 ses=258519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678901.497:4255231): pid=16154 uid=0 auid=0 ses=258520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678901.497:4255232): pid=16155 uid=0 auid=0 ses=258519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678901.498:4255233): pid=16153 uid=0 auid=0 ses=258521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678901.594:4255234): pid=16154 uid=0 auid=0 ses=258520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678901.598:4255235): pid=16154 uid=0 auid=0 ses=258520 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678901.616:4255236): pid=16155 uid=0 auid=0 ses=258519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678901.620:4255237): pid=16155 uid=0 auid=0 ses=258519 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678901.825:4255238): pid=16156 uid=0 auid=1055 ses=258522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678901.827:4255239): pid=16156 uid=0 auid=1055 ses=258522 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678904.858:4255240): pid=16153 uid=0 auid=0 ses=258521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678904.860:4255241): pid=16153 uid=0 auid=0 ses=258521 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674678919.998:4255242): avc: denied { name_connect } for pid=15245 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674678919.998:4255242): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe3fcd5070 a2=10 a3=7ffe3fcd506c items=0 ppid=5547 pid=15245 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678919.998:4255242): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674678961.878:4255243): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674678961.878:4255244): pid=16384 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674678961.880:4255245): pid=16384 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258523 res=1
type=USER_START msg=audit(1674678961.896:4255246): pid=16384 uid=0 auid=1055 ses=258523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674678961.897:4255247): pid=16384 uid=0 auid=1055 ses=258523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674678962.147:4255248): pid=16384 uid=0 auid=1055 ses=258523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674678962.149:4255249): pid=16384 uid=0 auid=1055 ses=258523 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674678964.731:4255250): avc: denied { write } for pid=16124 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674678964.731:4255250): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb24c34c0 a2=6e a3=63d192b4 items=0 ppid=5547 pid=16124 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678964.731:4255250): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674678973.695:4255251): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674678973.695:4255251): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aeb048cc010 items=0 ppid=16426 pid=16431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678973.695:4255251): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E3131312E31332E3633002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=NETFILTER_CFG msg=audit(1674678987.275:4255252): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674678987.275:4255252): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6cc1de7010 items=0 ppid=16487 pid=16492 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674678987.275:4255252): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131392E372E3133352E3230002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543230
type=AVC msg=audit(1674679002.448:4255253): avc: denied { read append } for pid=16549 comm="lmtp" name="maildirsize" dev="vda1" ino=48873984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674679002.448:4255253): avc: denied { open } for pid=16549 comm="lmtp" path="/home/a2zgroup/mail/maildirsize" dev="vda1" ino=48873984 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.448:4255253): arch=c000003e syscall=2 success=yes exit=17 a0=55ed30b3da00 a1=402 a2=7ffdbd2d6900 a3=fffff800 items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.448:4255253): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.451:4255254): avc: denied { getattr } for pid=16549 comm="lmtp" path="/home/a2zgroup/mail/dovecot.index.log" dev="vda1" ino=48867516 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.451:4255254): arch=c000003e syscall=5 success=yes exit=0 a0=11 a1=7ffdbd2d7780 a2=7ffdbd2d7780 a3=7ffdbd2d71e0 items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.451:4255254): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.451:4255255): avc: denied { write } for pid=16549 comm="lmtp" name="dovecot.index" dev="vda1" ino=48866709 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.451:4255255): arch=c000003e syscall=2 success=yes exit=18 a0=55ed30b7bbb0 a1=2 a2=7ffdbd2d7520 a3=7ffdbd2d6fe0 items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.451:4255255): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.457:4255256): avc: denied { write } for pid=16549 comm="lmtp" name="tmp" dev="vda1" ino=130057427 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674679002.457:4255256): avc: denied { add_name } for pid=16549 comm="lmtp" name="1674679002.M452123P16549.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674679002.457:4255256): avc: denied { create } for pid=16549 comm="lmtp" name="1674679002.M452123P16549.host.nexidigital.com" scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.457:4255256): arch=c000003e syscall=2 success=yes exit=21 a0=55ed30ad3f28 a1=2c1 a2=1ff a3=7ffdbd2d73a0 items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.457:4255256): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.460:4255257): avc: denied { lock } for pid=16549 comm="lmtp" path="/home/a2zgroup/mail/dovecot.index.log" dev="vda1" ino=48867516 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.460:4255257): arch=c000003e syscall=72 success=yes exit=0 a0=11 a1=7 a2=7ffdbd2d73b0 a3=63d192da items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.460:4255257): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.461:4255258): avc: denied { remove_name } for pid=16549 comm="lmtp" name="1674679002.M452123P16549.host.nexidigital.com" dev="vda1" ino=130847625 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=AVC msg=audit(1674679002.461:4255258): avc: denied { rename } for pid=16549 comm="lmtp" name="1674679002.M452123P16549.host.nexidigital.com" dev="vda1" ino=130847625 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.461:4255258): arch=c000003e syscall=82 success=yes exit=0 a0=55ed30ad2598 a1=55ed30ad25e0 a2=6a00 a3=7ffdbd2d7360 items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.461:4255258): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.462:4255259): avc: denied { read } for pid=16549 comm="lmtp" name="new" dev="vda1" ino=125867969 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674679002.462:4255259): arch=c000003e syscall=2 success=yes exit=21 a0=55ed30b975e8 a1=0 a2=0 a3=7ffdbd2d7360 items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.462:4255259): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.465:4255260): avc: denied { unlink } for pid=16549 comm="lmtp" name="dovecot-uidlist.lock" dev="vda1" ino=48866220 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.465:4255260): arch=c000003e syscall=87 success=yes exit=0 a0=55ed30b96e20 a1=7f240553d071 a2=2f9 a3=4 items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.465:4255260): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.466:4255261): avc: denied { link } for pid=16549 comm="lmtp" name=".temp.host.nexidigital.com.16549.dc34b6fcd25a7226" dev="vda1" ino=48866220 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.466:4255261): arch=c000003e syscall=86 success=yes exit=0 a0=55ed30ad45e8 a1=55ed30ad4560 a2=1 a3=63d192da items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.466:4255261): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679002.466:4255262): avc: denied { setattr } for pid=16549 comm="lmtp" name=".temp.host.nexidigital.com.16549.dc34b6fcd25a7226" dev="vda1" ino=48866220 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679002.466:4255262): arch=c000003e syscall=91 success=yes exit=0 a0=14 a1=1a0 a2=3ed a3=35 items=0 ppid=5547 pid=16549 auid=4294967295 uid=0 gid=1005 euid=1003 suid=0 fsuid=1003 egid=1005 sgid=1005 fsgid=1005 tty=(none) ses=4294967295 comm="lmtp" exe="/usr/libexec/dovecot/lmtp" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679002.466:4255262): proctitle="dovecot/lmtp"
type=AVC msg=audit(1674679020.409:4255263): avc: denied { name_connect } for pid=15245 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679020.409:4255263): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe3fcd5070 a2=10 a3=7ffe3fcd506c items=0 ppid=5547 pid=15245 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679020.409:4255263): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674679021.162:4255264): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679021.163:4255265): pid=16603 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679021.163:4255266): pid=16603 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258524 res=1
type=USER_START msg=audit(1674679021.178:4255267): pid=16603 uid=0 auid=1055 ses=258524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679021.179:4255268): pid=16603 uid=0 auid=1055 ses=258524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679021.439:4255269): pid=16603 uid=0 auid=1055 ses=258524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679021.441:4255270): pid=16603 uid=0 auid=1055 ses=258524 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674679021.500:4255271): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679021.500:4255271): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b4ddb5f9010 items=0 ppid=16615 pid=16621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679021.500:4255271): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130312E34332E3230322E313733002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674679081.456:4255272): pid=16792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679081.457:4255273): pid=16792 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679081.458:4255274): pid=16792 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258525 res=1
type=USER_START msg=audit(1674679081.469:4255275): pid=16792 uid=0 auid=1055 ses=258525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679081.470:4255276): pid=16792 uid=0 auid=1055 ses=258525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679081.731:4255277): pid=16792 uid=0 auid=1055 ses=258525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679081.733:4255278): pid=16792 uid=0 auid=1055 ses=258525 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674679104.057:4255279): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679104.057:4255280): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679104.057:4255281): pid=16858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16858 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679104.177:4255282): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=16858 suid=74 rport=60800 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679104.177:4255283): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=16858 suid=74 rport=60800 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=? res=success'
type=USER_AUTH msg=audit(1674679104.828:4255284): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=none acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679105.013:4255285): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=153.221.160.183 addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679107.461:4255286): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679107.606:4255287): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=153.221.160.183 addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679109.327:4255288): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679109.451:4255289): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=153.221.160.183 addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679111.449:4255290): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679111.572:4255291): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=153.221.160.183 addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679113.178:4255292): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679113.302:4255293): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=153.221.160.183 addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679114.516:4255294): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679114.516:4255295): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=maxtries exceeded acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679114.517:4255296): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16858 suid=74 rport=60800 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679114.517:4255297): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16858 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679114.518:4255298): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679114.519:4255299): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679114.519:4255300): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679114.519:4255301): pid=16857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679114.905:4255302): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679114.906:4255303): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679114.906:4255304): pid=16915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679115.029:4255305): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=16915 suid=74 rport=60862 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679115.029:4255306): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group14-sha1 spid=16915 suid=74 rport=60862 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=? res=success'
type=USER_AUTH msg=audit(1674679115.710:4255307): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=153.221.160.183 addr=153.221.160.183 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674679116.413:4255308): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679116.413:4255308): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f74800ae010 items=0 ppid=16930 pid=16933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679116.413:4255308): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674679116.417:4255309): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674679116.417:4255309): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f75ea237010 items=0 ppid=16930 pid=16934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679116.417:4255309): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674679116.421:4255310): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679116.421:4255310): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0c74322010 items=0 ppid=16930 pid=16935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679116.421:4255310): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674679116.425:4255311): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674679116.425:4255311): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4693569010 items=0 ppid=16930 pid=16936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679116.425:4255311): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674679116.716:4255312): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679116.716:4255312): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f10e60ee010 items=0 ppid=16930 pid=16944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679116.716:4255312): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730032332E39352E3136362E3438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679116.721:4255313): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679116.721:4255313): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa5414d3010 items=0 ppid=16930 pid=16945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679116.721:4255313): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640032332E39352E3136362E3438002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674679116.727:4255314): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674679116.727:4255314): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa69cca5010 items=0 ppid=16930 pid=16946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679116.727:4255314): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003135332E3232312E3136302E313833002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679116.732:4255315): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679116.732:4255315): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fed300c4010 items=0 ppid=16930 pid=16947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679116.732:4255315): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003135332E3232312E3136302E313833002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674679118.199:4255316): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679118.200:4255317): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16915 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679118.200:4255318): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=16915 suid=74 rport=60862 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679118.201:4255319): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=16914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679118.201:4255320): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=16914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679118.201:4255321): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=16914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679118.201:4255322): pid=16914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=153.221.160.183 terminal=ssh res=failed'
type=AVC msg=audit(1674679135.089:4255323): avc: denied { read } for pid=17027 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674679135.089:4255323): avc: denied { open } for pid=17027 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679135.089:4255323): arch=c000003e syscall=2 success=yes exit=18 a0=55d955b42f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679135.089:4255323): proctitle="dovecot/auth"
type=AVC msg=audit(1674679135.089:4255324): avc: denied { getattr } for pid=17027 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679135.089:4255324): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe91b85390 a2=7ffe91b85390 a3=fffffc00 items=0 ppid=5547 pid=17027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679135.089:4255324): proctitle="dovecot/auth"
type=AVC msg=audit(1674679135.625:4255325): avc: denied { write } for pid=17058 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674679135.625:4255325): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff42e3b9f0 a2=6e a3=63d1935f items=0 ppid=5547 pid=17058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679135.625:4255325): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674679141.755:4255327): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679141.755:4255326): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679141.755:4255328): pid=17139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679141.755:4255329): pid=17138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679141.755:4255330): pid=17138 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258526 res=1
type=LOGIN msg=audit(1674679141.756:4255331): pid=17139 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258527 res=1
type=USER_START msg=audit(1674679141.797:4255332): pid=17139 uid=0 auid=1055 ses=258527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679141.797:4255333): pid=17138 uid=0 auid=0 ses=258526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679141.800:4255334): pid=17139 uid=0 auid=1055 ses=258527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679141.800:4255335): pid=17138 uid=0 auid=0 ses=258526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679142.148:4255336): pid=17139 uid=0 auid=1055 ses=258527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679142.151:4255337): pid=17139 uid=0 auid=1055 ses=258527 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679142.899:4255338): pid=17138 uid=0 auid=0 ses=258526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679142.901:4255339): pid=17138 uid=0 auid=0 ses=258526 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674679149.080:4255340): avc: denied { name_connect } for pid=17027 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679149.080:4255340): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe91b85180 a2=10 a3=7ffe91b8517c items=0 ppid=5547 pid=17027 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679149.080:4255340): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674679189.794:4255341): pid=17318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679189.794:4255342): pid=17318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679189.794:4255343): pid=17318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679189.907:4255344): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=17318 suid=74 rport=42802 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679189.907:4255345): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=17318 suid=74 rport=42802 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=? res=success'
type=USER_AUTH msg=audit(1674679190.513:4255346): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.154.241.2 addr=165.154.241.2 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679192.630:4255347): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679192.757:4255348): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17318 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679192.757:4255349): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17318 suid=74 rport=42802 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679192.759:4255350): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679192.759:4255351): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679192.759:4255352): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17317 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679192.759:4255353): pid=17317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674679201.919:4255355): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679201.919:4255354): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679201.919:4255356): pid=17364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679201.920:4255357): pid=17363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679201.920:4255358): pid=17365 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679201.920:4255359): pid=17364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679201.921:4255360): pid=17363 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258528 res=1
type=LOGIN msg=audit(1674679201.921:4255361): pid=17365 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258529 res=1
type=LOGIN msg=audit(1674679201.921:4255362): pid=17364 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258530 res=1
type=USER_START msg=audit(1674679201.984:4255363): pid=17364 uid=0 auid=0 ses=258530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679201.985:4255364): pid=17365 uid=0 auid=1055 ses=258529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679201.985:4255365): pid=17363 uid=0 auid=0 ses=258528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679201.987:4255366): pid=17363 uid=0 auid=0 ses=258528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679201.987:4255367): pid=17364 uid=0 auid=0 ses=258530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679201.988:4255368): pid=17365 uid=0 auid=1055 ses=258529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679202.017:4255369): pid=17363 uid=0 auid=0 ses=258528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679202.021:4255370): pid=17363 uid=0 auid=0 ses=258528 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679202.289:4255371): pid=17365 uid=0 auid=1055 ses=258529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679202.297:4255372): pid=17365 uid=0 auid=1055 ses=258529 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679205.350:4255373): pid=17364 uid=0 auid=0 ses=258530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679205.352:4255374): pid=17364 uid=0 auid=0 ses=258530 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674679223.292:4255375): avc: denied { name_connect } for pid=17027 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679223.292:4255375): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe91b85180 a2=10 a3=7ffe91b8517c items=0 ppid=5547 pid=17027 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679223.292:4255375): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674679224.438:4255376): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679224.438:4255376): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ada7cee2010 items=0 ppid=17447 pid=17452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679224.438:4255376): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E32392E37302E3534002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543230
type=AVC msg=audit(1674679232.087:4255377): avc: denied { write } for pid=17501 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674679232.087:4255377): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe0f6af970 a2=6e a3=63d193c0 items=0 ppid=5547 pid=17501 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679232.087:4255377): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674679261.372:4255378): pid=17585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679261.372:4255379): pid=17585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679261.373:4255380): pid=17585 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258531 res=1
type=USER_START msg=audit(1674679261.388:4255381): pid=17585 uid=0 auid=1055 ses=258531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679261.390:4255382): pid=17585 uid=0 auid=1055 ses=258531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679261.635:4255383): pid=17585 uid=0 auid=1055 ses=258531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679261.639:4255384): pid=17585 uid=0 auid=1055 ses=258531 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674679263.554:4255385): pid=17602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679263.554:4255386): pid=17602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679263.554:4255387): pid=17602 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17602 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679263.697:4255388): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=17602 suid=74 rport=50990 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.83.74.104 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679263.697:4255389): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=17602 suid=74 rport=50990 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.83.74.104 terminal=? res=success'
type=USER_AUTH msg=audit(1674679264.400:4255390): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=51.83.74.104 addr=51.83.74.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679265.676:4255391): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.83.74.104 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679265.822:4255392): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17602 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679265.822:4255393): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17602 suid=74 rport=50990 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.83.74.104 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679265.823:4255394): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679265.823:4255395): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679265.824:4255396): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17601 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679265.824:4255397): pid=17601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.83.74.104 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674679321.655:4255398): pid=17781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679321.655:4255399): pid=17781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679321.655:4255400): pid=17781 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258532 res=1
type=USER_START msg=audit(1674679321.673:4255401): pid=17781 uid=0 auid=1055 ses=258532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679321.675:4255402): pid=17781 uid=0 auid=1055 ses=258532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674679321.866:4255403): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17790 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679321.866:4255404): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17790 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679321.866:4255405): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17790 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674679321.935:4255406): pid=17781 uid=0 auid=1055 ses=258532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679321.937:4255407): pid=17781 uid=0 auid=1055 ses=258532 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_SESSION msg=audit(1674679322.075:4255408): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=17790 suid=74 rport=41460 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.126.149 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679322.075:4255409): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=17790 suid=74 rport=41460 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.126.149 terminal=? res=success'
type=USER_AUTH msg=audit(1674679323.048:4255410): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=205.185.126.149 addr=205.185.126.149 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679325.091:4255411): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=205.185.126.149 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679325.305:4255412): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17790 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679325.305:4255413): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17790 suid=74 rport=41460 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.126.149 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679325.307:4255414): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679325.307:4255415): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679325.307:4255416): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17789 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679325.307:4255417): pid=17789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=205.185.126.149 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674679381.949:4255418): pid=17974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679381.949:4255419): pid=17973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679381.949:4255420): pid=17974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679381.949:4255421): pid=17973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679381.950:4255422): pid=17974 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258533 res=1
type=LOGIN msg=audit(1674679381.950:4255423): pid=17973 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258534 res=1
type=USER_START msg=audit(1674679381.982:4255424): pid=17974 uid=0 auid=1055 ses=258533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679381.983:4255425): pid=17973 uid=0 auid=0 ses=258534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679381.984:4255426): pid=17974 uid=0 auid=1055 ses=258533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679381.985:4255427): pid=17973 uid=0 auid=0 ses=258534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679382.046:4255428): pid=17973 uid=0 auid=0 ses=258534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679382.048:4255429): pid=17973 uid=0 auid=0 ses=258534 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679382.249:4255430): pid=17974 uid=0 auid=1055 ses=258533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679382.250:4255431): pid=17974 uid=0 auid=1055 ses=258533 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674679405.762:4255432): pid=18082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679405.762:4255433): pid=18082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679405.762:4255434): pid=18082 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18082 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679406.122:4255435): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18082 suid=74 rport=42497 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.16.132.42 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679406.123:4255436): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18082 suid=74 rport=42497 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.16.132.42 terminal=? res=success'
type=USER_AUTH msg=audit(1674679407.690:4255437): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=200.16.132.42 addr=200.16.132.42 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679410.265:4255438): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=200.16.132.42 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679410.626:4255439): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18082 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679410.626:4255440): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18082 suid=74 rport=42497 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.16.132.42 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679410.628:4255441): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679410.628:4255442): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679410.628:4255443): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18081 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679410.628:4255444): pid=18081 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=200.16.132.42 terminal=ssh res=failed'
type=AVC msg=audit(1674679421.756:4255445): avc: denied { read } for pid=18127 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674679421.756:4255445): avc: denied { open } for pid=18127 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679421.756:4255445): arch=c000003e syscall=2 success=yes exit=18 a0=55b3842fdf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=18127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679421.756:4255445): proctitle="dovecot/auth"
type=AVC msg=audit(1674679421.756:4255446): avc: denied { getattr } for pid=18127 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679421.756:4255446): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcde907390 a2=7ffcde907390 a3=fffffc00 items=0 ppid=5547 pid=18127 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679421.756:4255446): proctitle="dovecot/auth"
type=AVC msg=audit(1674679423.816:4255447): avc: denied { name_connect } for pid=18127 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679423.816:4255447): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcde907180 a2=10 a3=7ffcde90717c items=0 ppid=5547 pid=18127 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679423.816:4255447): proctitle="dovecot/auth"
type=AVC msg=audit(1674679423.843:4255448): avc: denied { write } for pid=18137 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674679423.843:4255448): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffe727af70 a2=6e a3=63d1947f items=0 ppid=5547 pid=18137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679423.843:4255448): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674679441.111:4255449): avc: denied { name_connect } for pid=18127 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679441.111:4255449): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffcde907180 a2=10 a3=7ffcde90717c items=0 ppid=5547 pid=18127 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679441.111:4255449): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674679441.266:4255450): pid=18282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679441.266:4255451): pid=18282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679441.267:4255452): pid=18282 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258535 res=1
type=USER_START msg=audit(1674679441.283:4255453): pid=18282 uid=0 auid=1055 ses=258535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679441.286:4255454): pid=18282 uid=0 auid=1055 ses=258535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679441.530:4255455): pid=18282 uid=0 auid=1055 ses=258535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679441.531:4255456): pid=18282 uid=0 auid=1055 ses=258535 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674679454.245:4255457): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679454.245:4255458): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679454.245:4255459): pid=18372 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18372 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679454.384:4255460): pid=18371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18372 suid=74 rport=35110 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.83.74.104 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679454.384:4255461): pid=18371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18372 suid=74 rport=35110 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.83.74.104 terminal=? res=success'
type=USER_AUTH msg=audit(1674679455.077:4255462): pid=18371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=51.83.74.104 addr=51.83.74.104 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674679456.461:4255463): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679456.461:4255463): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fef57d8e010 items=0 ppid=18383 pid=18386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679456.461:4255463): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674679456.466:4255464): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679456.466:4255464): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9f6c73d010 items=0 ppid=18383 pid=18387 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679456.466:4255464): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674679456.470:4255465): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674679456.470:4255465): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc499de0010 items=0 ppid=18383 pid=18388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679456.470:4255465): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674679456.473:4255466): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679456.473:4255466): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe43eeea010 items=0 ppid=18383 pid=18389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679456.473:4255466): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674679456.778:4255467): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679456.778:4255467): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc9c75e5010 items=0 ppid=18383 pid=18397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679456.778:4255467): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138382E3235302E3137322E3439002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679456.783:4255468): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679456.783:4255468): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efc63249010 items=0 ppid=18383 pid=18398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679456.783:4255468): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138382E3235302E3137322E3439002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674679456.789:4255469): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679456.789:4255469): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4af9a8e010 items=0 ppid=18383 pid=18399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679456.789:4255469): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035312E38332E37342E313034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679456.794:4255470): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679456.794:4255470): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1583d83010 items=0 ppid=18383 pid=18400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679456.794:4255470): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035312E38332E37342E313034002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674679457.576:4255471): pid=18371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.83.74.104 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679488.694:4255472): pid=18515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679488.694:4255473): pid=18515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679488.695:4255474): pid=18515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679488.906:4255475): pid=18514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18515 suid=74 rport=48678 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.126.149 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679488.907:4255476): pid=18514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18515 suid=74 rport=48678 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=205.185.126.149 terminal=? res=success'
type=USER_AUTH msg=audit(1674679489.879:4255477): pid=18514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=205.185.126.149 addr=205.185.126.149 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674679491.702:4255478): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679491.702:4255478): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc497953010 items=0 ppid=18530 pid=18533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679491.702:4255478): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674679491.706:4255479): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679491.706:4255479): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f24e2e62010 items=0 ppid=18530 pid=18534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679491.706:4255479): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674679491.711:4255480): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674679491.711:4255480): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fab5631c010 items=0 ppid=18530 pid=18535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679491.711:4255480): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674679491.714:4255481): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679491.714:4255481): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd6a647e010 items=0 ppid=18530 pid=18536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679491.714:4255481): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674679492.003:4255482): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679492.003:4255482): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fca6f816010 items=0 ppid=18530 pid=18544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679492.003:4255482): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132392E3135302E3138302E313438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679492.010:4255483): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679492.010:4255483): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f36020e1010 items=0 ppid=18530 pid=18545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679492.010:4255483): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132392E3135302E3138302E313438002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674679492.016:4255484): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679492.016:4255484): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f52aac14010 items=0 ppid=18530 pid=18546 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679492.016:4255484): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003230352E3138352E3132362E313439002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679492.021:4255485): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679492.021:4255485): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f322d407010 items=0 ppid=18530 pid=18547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679492.021:4255485): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003230352E3138352E3132362E313439002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674679492.378:4255486): pid=18514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=205.185.126.149 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679499.547:4255487): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679499.547:4255488): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679499.547:4255489): pid=18582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679499.659:4255490): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18582 suid=74 rport=34532 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679499.659:4255491): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18582 suid=74 rport=34532 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=? res=success'
type=USER_AUTH msg=audit(1674679500.247:4255492): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=175.126.146.170 addr=175.126.146.170 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674679501.548:4255494): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679501.548:4255495): pid=18587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679501.548:4255493): pid=18589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679501.548:4255496): pid=18587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679501.548:4255497): pid=18589 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679501.548:4255498): pid=18588 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679501.549:4255500): pid=18587 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258537 res=1
type=LOGIN msg=audit(1674679501.549:4255499): pid=18589 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258536 res=1
type=LOGIN msg=audit(1674679501.549:4255501): pid=18588 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258538 res=1
type=USER_START msg=audit(1674679501.594:4255502): pid=18589 uid=0 auid=1055 ses=258536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679501.594:4255503): pid=18587 uid=0 auid=0 ses=258537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679501.595:4255504): pid=18588 uid=0 auid=0 ses=258538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679501.596:4255505): pid=18589 uid=0 auid=1055 ses=258536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679501.596:4255506): pid=18588 uid=0 auid=0 ses=258538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679501.597:4255507): pid=18587 uid=0 auid=0 ses=258537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679501.725:4255508): pid=18588 uid=0 auid=0 ses=258538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679501.731:4255509): pid=18588 uid=0 auid=0 ses=258538 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679501.976:4255510): pid=18589 uid=0 auid=1055 ses=258536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679501.978:4255511): pid=18589 uid=0 auid=1055 ses=258536 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674679502.256:4255512): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679502.370:4255513): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18582 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679502.370:4255514): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18582 suid=74 rport=34532 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679502.372:4255515): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679502.372:4255516): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679502.372:4255517): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679502.372:4255518): pid=18581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674679504.924:4255519): pid=18587 uid=0 auid=0 ses=258537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679504.926:4255520): pid=18587 uid=0 auid=0 ses=258537 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674679527.111:4255521): pid=18697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679527.111:4255522): pid=18697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679527.112:4255523): pid=18697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18697 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679527.113:4255524): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256 spid=18697 suid=74 rport=51304 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679527.113:4255525): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256 spid=18697 suid=74 rport=51304 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=? res=success'
type=USER_AUTH msg=audit(1674679528.167:4255526): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=120.232.149.151 addr=120.232.149.151 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679530.020:4255527): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679530.261:4255528): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18697 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679530.261:4255529): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18697 suid=74 rport=51304 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679530.263:4255530): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679530.263:4255531): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679530.263:4255532): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679530.263:4255533): pid=18671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679541.612:4255534): pid=18736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679541.612:4255535): pid=18736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679541.612:4255536): pid=18736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18736 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679541.986:4255537): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18736 suid=74 rport=58225 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.104.220.42 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679541.987:4255538): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18736 suid=74 rport=58225 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.104.220.42 terminal=? res=success'
type=USER_AUTH msg=audit(1674679543.604:4255539): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=190.104.220.42 addr=190.104.220.42 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679545.516:4255540): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.104.220.42 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679545.894:4255541): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18736 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679545.894:4255542): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18736 suid=74 rport=58225 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.104.220.42 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679545.896:4255543): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679545.896:4255544): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679545.896:4255545): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18735 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679545.896:4255546): pid=18735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.104.220.42 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679561.092:4255547): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679561.092:4255548): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679561.092:4255549): pid=18797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18797 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679561.205:4255550): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18797 suid=74 rport=39728 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679561.206:4255551): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=18797 suid=74 rport=39728 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=? res=success'
type=USER_AUTH msg=audit(1674679561.773:4255552): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.154.241.2 addr=165.154.241.2 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674679561.946:4255553): pid=18803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679561.947:4255554): pid=18803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679561.948:4255555): pid=18803 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258539 res=1
type=USER_START msg=audit(1674679561.969:4255556): pid=18803 uid=0 auid=1055 ses=258539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679561.971:4255557): pid=18803 uid=0 auid=1055 ses=258539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679562.207:4255558): pid=18803 uid=0 auid=1055 ses=258539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679562.209:4255559): pid=18803 uid=0 auid=1055 ses=258539 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674679563.821:4255560): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679563.931:4255561): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18797 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679563.931:4255562): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18797 suid=74 rport=39728 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679563.932:4255563): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679563.932:4255564): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679563.932:4255565): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18796 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679563.932:4255566): pid=18796 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.241.2 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674679566.552:4255567): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679566.552:4255567): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f14b090d010 items=0 ppid=18829 pid=18832 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679566.552:4255567): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674679566.557:4255568): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679566.557:4255568): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f608d289010 items=0 ppid=18829 pid=18833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679566.557:4255568): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674679566.561:4255569): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674679566.561:4255569): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3ed1723010 items=0 ppid=18829 pid=18834 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679566.561:4255569): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674679566.565:4255570): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679566.565:4255570): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4a86f0c010 items=0 ppid=18829 pid=18835 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679566.565:4255570): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674679566.867:4255571): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679566.867:4255571): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdd40684010 items=0 ppid=18829 pid=18843 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679566.867:4255571): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131332E3136302E3234342E313434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679566.874:4255572): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679566.874:4255572): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6579023010 items=0 ppid=18829 pid=18844 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679566.874:4255572): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131332E3136302E3234342E313434002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674679566.880:4255573): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679566.880:4255573): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f65daa32010 items=0 ppid=18829 pid=18845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679566.880:4255573): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003136352E3135342E3234312E32002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679566.885:4255574): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679566.885:4255574): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8778cd8010 items=0 ppid=18829 pid=18846 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679566.885:4255574): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003136352E3135342E3234312E32002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674679600.036:4255575): avc: denied { read } for pid=18954 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674679600.036:4255575): avc: denied { open } for pid=18954 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679600.036:4255575): arch=c000003e syscall=2 success=yes exit=18 a0=55b6573d4f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=18954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679600.036:4255575): proctitle="dovecot/auth"
type=AVC msg=audit(1674679600.036:4255576): avc: denied { getattr } for pid=18954 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679600.036:4255576): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe6025a4b0 a2=7ffe6025a4b0 a3=fffffc00 items=0 ppid=5547 pid=18954 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679600.036:4255576): proctitle="dovecot/auth"
type=AVC msg=audit(1674679601.922:4255577): avc: denied { name_connect } for pid=18954 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679601.922:4255577): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe6025a2a0 a2=10 a3=7ffe6025a29c items=0 ppid=5547 pid=18954 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679601.922:4255577): proctitle="dovecot/auth"
type=AVC msg=audit(1674679601.952:4255578): avc: denied { write } for pid=18962 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674679601.952:4255578): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc95195530 a2=6e a3=63d19531 items=0 ppid=5547 pid=18962 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679601.952:4255578): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674679621.225:4255579): pid=19030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679621.225:4255580): pid=19030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679621.227:4255581): pid=19030 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258540 res=1
type=USER_START msg=audit(1674679621.245:4255582): pid=19030 uid=0 auid=1055 ses=258540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679621.247:4255583): pid=19030 uid=0 auid=1055 ses=258540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679621.558:4255584): pid=19030 uid=0 auid=1055 ses=258540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679621.560:4255585): pid=19030 uid=0 auid=1055 ses=258540 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674679629.888:4255586): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679629.888:4255587): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679629.888:4255588): pid=19064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19064 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679630.254:4255589): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19064 suid=74 rport=43355 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679630.254:4255590): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19064 suid=74 rport=43355 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=? res=success'
type=USER_AUTH msg=audit(1674679631.850:4255591): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=200.69.196.27 addr=200.69.196.27 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679633.843:4255592): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679634.213:4255593): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19064 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679634.213:4255594): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19064 suid=74 rport=43355 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679634.214:4255595): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679634.214:4255596): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679634.214:4255597): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679634.214:4255598): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679657.141:4255599): pid=19173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679657.141:4255600): pid=19173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679657.141:4255601): pid=19173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19173 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679657.143:4255602): pid=19167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256 spid=19173 suid=74 rport=46264 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679657.143:4255603): pid=19167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256 spid=19173 suid=74 rport=46264 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=? res=success'
type=USER_ACCT msg=audit(1674679681.577:4255604): pid=19239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679681.577:4255605): pid=19239 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679681.578:4255606): pid=19239 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258541 res=1
type=USER_START msg=audit(1674679681.591:4255607): pid=19239 uid=0 auid=1055 ses=258541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679681.593:4255608): pid=19239 uid=0 auid=1055 ses=258541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679681.813:4255609): pid=19239 uid=0 auid=1055 ses=258541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679681.815:4255610): pid=19239 uid=0 auid=1055 ses=258541 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674679708.064:4255611): avc: denied { name_connect } for pid=19361 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679708.064:4255611): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff4b4fc580 a2=10 a3=7fff4b4fc57c items=0 ppid=5547 pid=19361 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679708.064:4255611): proctitle="dovecot/auth"
type=AVC msg=audit(1674679708.090:4255612): avc: denied { write } for pid=19364 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674679708.090:4255612): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcbcb2d5a0 a2=6e a3=63d1959c items=0 ppid=5547 pid=19364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679708.090:4255612): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674679708.553:4255613): avc: denied { read append } for pid=19366 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674679708.553:4255613): avc: denied { open } for pid=19366 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679708.553:4255613): arch=c000003e syscall=2 success=yes exit=8 a0=55f03864ca60 a1=402 a2=7ffe0db6a860 a3=7ffe0db6a2e0 items=0 ppid=5547 pid=19366 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679708.553:4255613): proctitle="dovecot/imap"
type=AVC msg=audit(1674679708.553:4255614): avc: denied { getattr } for pid=19366 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679708.553:4255614): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffe0db6a7c0 a2=7ffe0db6a7c0 a3=7ffe0db6a220 items=0 ppid=5547 pid=19366 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679708.553:4255614): proctitle="dovecot/imap"
type=AVC msg=audit(1674679708.553:4255615): avc: denied { write } for pid=19366 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679708.553:4255615): arch=c000003e syscall=2 success=yes exit=10 a0=55f038651960 a1=2 a2=7ffe0db6a560 a3=7ffe0db6a020 items=0 ppid=5547 pid=19366 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679708.553:4255615): proctitle="dovecot/imap"
type=AVC msg=audit(1674679708.554:4255616): avc: denied { lock } for pid=19366 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679708.554:4255616): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe0db6a460 a3=63d1959c items=0 ppid=5547 pid=19366 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679708.554:4255616): proctitle="dovecot/imap"
type=AVC msg=audit(1674679708.554:4255617): avc: denied { read } for pid=19366 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674679708.554:4255617): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55f03867a300 a2=90800 a3=0 items=0 ppid=5547 pid=19366 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679708.554:4255617): proctitle="dovecot/imap"
type=AVC msg=audit(1674679708.555:4255618): avc: denied { getattr } for pid=19366 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679708.555:4255618): arch=c000003e syscall=4 success=yes exit=0 a0=55f03863ca60 a1=7ffe0db6a810 a2=7ffe0db6a810 a3=6f632e6f72676173 items=0 ppid=5547 pid=19366 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679708.555:4255618): proctitle="dovecot/imap"
type=AVC msg=audit(1674679710.175:4255619): avc: denied { write } for pid=19371 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674679710.175:4255619): arch=c000003e syscall=21 success=yes exit=0 a0=55dde1a6a4c0 a1=2 a2=7b48 a3=7ffc0c608f60 items=0 ppid=5547 pid=19371 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679710.175:4255619): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674679718.115:4255620): pid=19393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679718.115:4255621): pid=19393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679718.115:4255622): pid=19393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19393 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679718.463:4255623): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19393 suid=74 rport=56717 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.16.132.42 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679718.463:4255624): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19393 suid=74 rport=56717 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.16.132.42 terminal=? res=success'
type=USER_AUTH msg=audit(1674679719.985:4255625): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=200.16.132.42 addr=200.16.132.42 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674679721.618:4255626): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679721.618:4255626): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f751501f010 items=0 ppid=19408 pid=19412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679721.618:4255626): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674679721.622:4255627): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679721.622:4255627): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe174675010 items=0 ppid=19408 pid=19413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679721.622:4255627): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674679721.626:4255628): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674679721.626:4255628): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f06229df010 items=0 ppid=19408 pid=19414 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679721.626:4255628): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674679721.630:4255629): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679721.630:4255629): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f291647e010 items=0 ppid=19408 pid=19415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679721.630:4255629): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674679721.928:4255630): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679721.928:4255630): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe2b9d80010 items=0 ppid=19408 pid=19423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679721.928:4255630): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730031342E34392E3232302E3932002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679721.935:4255631): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679721.935:4255631): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efd0e434010 items=0 ppid=19408 pid=19424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679721.935:4255631): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640031342E34392E3232302E3932002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674679721.940:4255632): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679721.940:4255632): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb65ed7f010 items=0 ppid=19408 pid=19425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679721.940:4255632): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003230302E31362E3133322E3432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679721.945:4255633): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679721.945:4255633): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f750b7ce010 items=0 ppid=19408 pid=19426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679721.945:4255633): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003230302E31362E3133322E3432002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674679722.058:4255634): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=200.16.132.42 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679727.234:4255635): pid=19447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679727.234:4255636): pid=19447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679727.234:4255637): pid=19447 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19447 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679727.470:4255638): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=19447 suid=74 rport=56845 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=112.168.206.177 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679727.471:4255639): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=19447 suid=74 rport=56845 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=112.168.206.177 terminal=? res=success'
type=USER_AUTH msg=audit(1674679729.206:4255640): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=112.168.206.177 addr=112.168.206.177 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679731.318:4255641): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=112.168.206.177 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679731.860:4255642): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19447 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679731.860:4255643): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19447 suid=74 rport=56845 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=112.168.206.177 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679731.861:4255644): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19446 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679731.861:4255645): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19446 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679731.861:4255646): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19446 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679731.861:4255647): pid=19446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=112.168.206.177 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679732.115:4255648): pid=19459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679732.115:4255649): pid=19459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679732.115:4255650): pid=19459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19459 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679732.233:4255651): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19459 suid=74 rport=46660 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679732.234:4255652): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=19459 suid=74 rport=46660 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=? res=success'
type=USER_AUTH msg=audit(1674679732.833:4255653): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=175.126.146.170 addr=175.126.146.170 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679734.690:4255654): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679734.813:4255655): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19459 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679734.813:4255656): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19459 suid=74 rport=46660 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679734.814:4255657): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679734.814:4255658): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679734.814:4255659): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19458 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679734.814:4255660): pid=19458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=175.126.146.170 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674679736.620:4255661): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679736.620:4255661): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe05df6f010 items=0 ppid=19482 pid=19485 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679736.620:4255661): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674679736.624:4255662): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679736.624:4255662): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc6dec46010 items=0 ppid=19482 pid=19486 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679736.624:4255662): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674679736.628:4255663): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674679736.628:4255663): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f099d153010 items=0 ppid=19482 pid=19487 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679736.628:4255663): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674679736.632:4255664): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679736.632:4255664): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5eb41f9010 items=0 ppid=19482 pid=19488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679736.632:4255664): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674679736.918:4255665): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679736.918:4255665): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb1bac72010 items=0 ppid=19482 pid=19496 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679736.918:4255665): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730033362E3232382E3231302E313730002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679736.924:4255666): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679736.924:4255666): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9b3f10f010 items=0 ppid=19482 pid=19497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679736.924:4255666): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640033362E3232382E3231302E313730002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674679736.930:4255667): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679736.930:4255667): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa13cf71010 items=0 ppid=19482 pid=19498 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679736.930:4255667): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003137352E3132362E3134362E313730002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679736.935:4255668): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679736.935:4255668): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7c2f091010 items=0 ppid=19482 pid=19499 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679736.935:4255668): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003137352E3132362E3134362E313730002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674679741.833:4255669): pid=19520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679741.833:4255670): pid=19520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679741.834:4255671): pid=19520 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258542 res=1
type=USER_START msg=audit(1674679741.861:4255672): pid=19520 uid=0 auid=1055 ses=258542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679741.863:4255673): pid=19520 uid=0 auid=1055 ses=258542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679742.166:4255674): pid=19520 uid=0 auid=1055 ses=258542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679742.168:4255675): pid=19520 uid=0 auid=1055 ses=258542 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674679777.538:4255676): avc: denied { name_connect } for pid=19361 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679777.538:4255676): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff4b4fc580 a2=10 a3=7fff4b4fc57c items=0 ppid=5547 pid=19361 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679777.538:4255676): proctitle="dovecot/auth"
type=AVC msg=audit(1674679777.571:4255677): avc: denied { write } for pid=19685 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674679777.571:4255677): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc8adc2790 a2=6e a3=63d195e1 items=0 ppid=5547 pid=19685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679777.571:4255677): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674679801.184:4255678): pid=19805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679801.184:4255679): pid=19807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679801.184:4255680): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679801.184:4255681): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679801.184:4255682): pid=19807 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679801.184:4255683): pid=19805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679801.184:4255684): pid=19806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679801.184:4255685): pid=19808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679801.185:4255686): pid=19805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258543 res=1
type=LOGIN msg=audit(1674679801.185:4255688): pid=19807 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258545 res=1
type=LOGIN msg=audit(1674679801.185:4255687): pid=19806 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258544 res=1
type=LOGIN msg=audit(1674679801.185:4255689): pid=19808 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258546 res=1
type=USER_START msg=audit(1674679801.241:4255692): pid=19806 uid=0 auid=0 ses=258544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679801.241:4255691): pid=19808 uid=0 auid=1055 ses=258546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679801.241:4255690): pid=19805 uid=0 auid=0 ses=258543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674679801.242:4255693): pid=19807 uid=0 auid=0 ses=258545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679801.243:4255694): pid=19808 uid=0 auid=1055 ses=258546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679801.243:4255695): pid=19807 uid=0 auid=0 ses=258545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679801.243:4255696): pid=19805 uid=0 auid=0 ses=258543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679801.245:4255697): pid=19806 uid=0 auid=0 ses=258544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679801.268:4255698): pid=19805 uid=0 auid=0 ses=258543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679801.271:4255699): pid=19805 uid=0 auid=0 ses=258543 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679801.316:4255700): pid=19807 uid=0 auid=0 ses=258545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679801.318:4255701): pid=19807 uid=0 auid=0 ses=258545 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679801.522:4255702): pid=19808 uid=0 auid=1055 ses=258546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679801.526:4255703): pid=19808 uid=0 auid=1055 ses=258546 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679804.596:4255704): pid=19806 uid=0 auid=0 ses=258544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679804.598:4255705): pid=19806 uid=0 auid=0 ses=258544 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674679861.621:4255706): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679861.621:4255707): pid=20032 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679861.622:4255708): pid=20032 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258547 res=1
type=USER_START msg=audit(1674679861.639:4255709): pid=20032 uid=0 auid=1055 ses=258547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679861.641:4255710): pid=20032 uid=0 auid=1055 ses=258547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679861.936:4255711): pid=20032 uid=0 auid=1055 ses=258547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679861.938:4255712): pid=20032 uid=0 auid=1055 ses=258547 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674679866.774:4255713): avc: denied { name_connect } for pid=19361 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679866.774:4255713): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff4b4fc580 a2=10 a3=7fff4b4fc57c items=0 ppid=5547 pid=19361 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679866.774:4255713): proctitle="dovecot/auth"
type=AVC msg=audit(1674679866.806:4255714): avc: denied { write } for pid=20053 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674679866.806:4255714): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd36681b40 a2=6e a3=63d1963a items=0 ppid=5547 pid=20053 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679866.806:4255714): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674679921.953:4255715): pid=20241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679921.954:4255716): pid=20241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679921.955:4255717): pid=20241 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258548 res=1
type=USER_START msg=audit(1674679921.968:4255718): pid=20241 uid=0 auid=1055 ses=258548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679921.969:4255719): pid=20241 uid=0 auid=1055 ses=258548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679922.245:4255720): pid=20241 uid=0 auid=1055 ses=258548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679922.248:4255721): pid=20241 uid=0 auid=1055 ses=258548 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674679922.687:4255722): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679922.687:4255723): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679922.687:4255724): pid=20255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20255 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679922.972:4255725): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256 spid=20255 suid=74 rport=56534 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674679922.972:4255726): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-ctr ksize=256 mac=hmac-sha1 pfs=curve25519-sha256 spid=20255 suid=74 rport=56534 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=? res=success'
type=USER_AUTH msg=audit(1674679924.234:4255727): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=120.232.149.151 addr=120.232.149.151 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674679926.116:4255728): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674679926.402:4255729): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20255 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679926.402:4255730): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=20255 suid=74 rport=56534 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679926.404:4255731): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679926.404:4255732): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674679926.404:4255733): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20252 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674679926.404:4255734): pid=20252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=120.232.149.151 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674679927.990:4255735): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679927.990:4255735): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcb3a26c010 items=0 ppid=20275 pid=20278 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679927.990:4255735): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674679927.994:4255736): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679927.994:4255736): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f702e00f010 items=0 ppid=20275 pid=20279 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679927.994:4255736): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674679927.998:4255737): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674679927.998:4255737): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5a24164010 items=0 ppid=20275 pid=20280 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679927.998:4255737): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674679928.002:4255738): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674679928.002:4255738): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc569d79010 items=0 ppid=20275 pid=20281 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679928.002:4255738): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674679928.311:4255739): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674679928.311:4255739): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9221743010 items=0 ppid=20275 pid=20289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679928.311:4255739): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730034362E31392E3133362E313338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679928.318:4255740): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679928.318:4255740): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4b47d0b010 items=0 ppid=20275 pid=20290 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679928.318:4255740): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640034362E31392E3133362E313338002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674679928.324:4255741): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674679928.324:4255741): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fecb9834010 items=0 ppid=20275 pid=20291 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679928.324:4255741): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003132302E3233322E3134392E313531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674679928.330:4255742): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674679928.330:4255742): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3084a18010 items=0 ppid=20275 pid=20292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679928.330:4255742): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003132302E3233322E3134392E313531002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674679959.343:4255743): avc: denied { read } for pid=20404 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674679959.343:4255743): avc: denied { open } for pid=20404 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679959.343:4255743): arch=c000003e syscall=2 success=yes exit=18 a0=55cc5c156f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679959.343:4255743): proctitle="dovecot/auth"
type=AVC msg=audit(1674679959.343:4255744): avc: denied { getattr } for pid=20404 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674679959.343:4255744): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffed2e3f770 a2=7ffed2e3f770 a3=fffffc00 items=0 ppid=5547 pid=20404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679959.343:4255744): proctitle="dovecot/auth"
type=AVC msg=audit(1674679960.566:4255745): avc: denied { name_connect } for pid=20404 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674679960.566:4255745): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffed2e3f560 a2=10 a3=7ffed2e3f55c items=0 ppid=5547 pid=20404 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679960.566:4255745): proctitle="dovecot/auth"
type=AVC msg=audit(1674679960.608:4255746): avc: denied { write } for pid=20413 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674679960.608:4255746): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff75554b60 a2=6e a3=63d19698 items=0 ppid=5547 pid=20413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674679960.608:4255746): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674679981.267:4255747): pid=20475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674679981.267:4255748): pid=20475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674679981.267:4255749): pid=20475 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258549 res=1
type=USER_START msg=audit(1674679981.286:4255750): pid=20475 uid=0 auid=1055 ses=258549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674679981.287:4255751): pid=20475 uid=0 auid=1055 ses=258549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674679981.526:4255752): pid=20475 uid=0 auid=1055 ses=258549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674679981.527:4255753): pid=20475 uid=0 auid=1055 ses=258549 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680041.541:4255754): pid=20669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680041.541:4255755): pid=20669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680041.542:4255756): pid=20669 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258550 res=1
type=USER_START msg=audit(1674680041.556:4255757): pid=20669 uid=0 auid=1055 ses=258550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680041.559:4255758): pid=20669 uid=0 auid=1055 ses=258550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680041.840:4255759): pid=20669 uid=0 auid=1055 ses=258550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680041.841:4255760): pid=20669 uid=0 auid=1055 ses=258550 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680101.856:4255761): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680101.856:4255762): pid=20846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680101.857:4255763): pid=20847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680101.857:4255764): pid=20846 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680101.858:4255765): pid=20847 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258551 res=1
type=LOGIN msg=audit(1674680101.858:4255766): pid=20846 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258552 res=1
type=USER_START msg=audit(1674680101.901:4255767): pid=20847 uid=0 auid=1055 ses=258551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680101.901:4255768): pid=20847 uid=0 auid=1055 ses=258551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674680101.907:4255769): pid=20846 uid=0 auid=0 ses=258552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680101.917:4255770): pid=20846 uid=0 auid=0 ses=258552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680102.270:4255771): pid=20847 uid=0 auid=1055 ses=258551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680102.272:4255772): pid=20847 uid=0 auid=1055 ses=258551 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680105.259:4255773): pid=20846 uid=0 auid=0 ses=258552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680105.261:4255774): pid=20846 uid=0 auid=0 ses=258552 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674680154.180:4255775): avc: denied { read } for pid=21036 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674680154.180:4255775): avc: denied { open } for pid=21036 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680154.180:4255775): arch=c000003e syscall=2 success=yes exit=18 a0=55afb8b5af70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=21036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680154.180:4255775): proctitle="dovecot/auth"
type=AVC msg=audit(1674680154.180:4255776): avc: denied { getattr } for pid=21036 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680154.180:4255776): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc4efe61e0 a2=7ffc4efe61e0 a3=fffffc00 items=0 ppid=5547 pid=21036 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680154.180:4255776): proctitle="dovecot/auth"
type=AVC msg=audit(1674680154.675:4255777): avc: denied { name_connect } for pid=21036 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674680154.675:4255777): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc4efe5fd0 a2=10 a3=7ffc4efe5fcc items=0 ppid=5547 pid=21036 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680154.675:4255777): proctitle="dovecot/auth"
type=AVC msg=audit(1674680154.709:4255778): avc: denied { write } for pid=21066 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674680154.709:4255778): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc67807060 a2=6e a3=63d1975a items=0 ppid=5547 pid=21066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680154.709:4255778): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674680161.278:4255779): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680161.278:4255780): pid=21152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680161.278:4255781): pid=21152 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258553 res=1
type=USER_START msg=audit(1674680161.295:4255782): pid=21152 uid=0 auid=1055 ses=258553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680161.297:4255783): pid=21152 uid=0 auid=1055 ses=258553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680161.535:4255784): pid=21152 uid=0 auid=1055 ses=258553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680161.537:4255785): pid=21152 uid=0 auid=1055 ses=258553 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674680215.717:4255786): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674680215.717:4255786): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b46cd79a010 items=0 ppid=21351 pid=21356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680215.717:4255786): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3134332E3139302E313037002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674680221.553:4255787): pid=21382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680221.553:4255788): pid=21382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680221.554:4255789): pid=21382 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258554 res=1
type=USER_START msg=audit(1674680221.568:4255790): pid=21382 uid=0 auid=1055 ses=258554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680221.569:4255791): pid=21382 uid=0 auid=1055 ses=258554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680221.791:4255792): pid=21382 uid=0 auid=1055 ses=258554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680221.792:4255793): pid=21382 uid=0 auid=1055 ses=258554 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.274:4255794): pid=21531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.274:4255795): pid=21531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.274:4255796): pid=21531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.278:4255797): pid=21540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.278:4255798): pid=21539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.278:4255799): pid=21540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.278:4255800): pid=21539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.278:4255801): pid=21540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.278:4255802): pid=21539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.281:4255803): pid=21542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.283:4255804): pid=21542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.283:4255805): pid=21542 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21542 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.283:4255806): pid=21543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.283:4255807): pid=21541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.283:4255808): pid=21543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.283:4255809): pid=21543 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21543 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.283:4255810): pid=21541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.283:4255811): pid=21541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21541 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.288:4255812): pid=21544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.288:4255813): pid=21544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.288:4255814): pid=21544 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21544 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.377:4255815): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21539 suid=74 rport=52410 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.377:4255816): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21539 suid=74 rport=52410 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.384:4255817): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21540 suid=74 rport=52470 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.384:4255818): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21540 suid=74 rport=52470 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.391:4255819): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21542 suid=74 rport=52432 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.391:4255820): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21542 suid=74 rport=52432 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.391:4255821): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21543 suid=74 rport=52388 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.393:4255822): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21543 suid=74 rport=52388 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.397:4255823): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21544 suid=74 rport=52486 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.397:4255824): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21544 suid=74 rport=52486 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.511:4255825): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.513:4255826): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.513:4255827): pid=21545 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21545 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.513:4255828): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21545 suid=74 rport=52476 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.513:4255829): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21545 suid=74 rport=52476 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.674:4255830): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.674:4255831): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.674:4255832): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.674:4255833): pid=21549 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21549 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.674:4255834): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680261.674:4255835): pid=21550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21550 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.781:4255836): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21550 suid=74 rport=52398 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.781:4255837): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21550 suid=74 rport=52398 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.781:4255838): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21549 suid=74 rport=52422 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.781:4255839): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21549 suid=74 rport=52422 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=USER_AUTH msg=audit(1674680261.826:4255840): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680261.826:4255841): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680261.838:4255842): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_SESSION msg=audit(1674680261.979:4255843): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21541 suid=74 rport=52448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680261.979:4255844): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21541 suid=74 rport=52448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=USER_AUTH msg=audit(1674680261.979:4255845): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680262.059:4255846): pid=21553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.059:4255847): pid=21553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.059:4255848): pid=21553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21553 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.164:4255849): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21553 suid=74 rport=52472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.164:4255850): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21553 suid=74 rport=52472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=USER_AUTH msg=audit(1674680262.211:4255851): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680262.219:4255852): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680262.221:4255853): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680262.223:4255854): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680262.271:4255855): pid=21568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.271:4255856): pid=21568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.271:4255857): pid=21568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21568 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.278:4255858): pid=21570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.279:4255859): pid=21570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.279:4255860): pid=21570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21570 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.281:4255861): pid=21569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.281:4255862): pid=21569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.281:4255863): pid=21569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.286:4255864): pid=21573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.286:4255865): pid=21573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.286:4255866): pid=21573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21573 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.286:4255867): pid=21571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.287:4255868): pid=21571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.287:4255869): pid=21571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21571 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.287:4255870): pid=21572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.287:4255871): pid=21572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.287:4255872): pid=21572 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21572 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.289:4255873): pid=21574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.290:4255874): pid=21574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.290:4255875): pid=21574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21574 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.291:4255876): pid=21575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.291:4255877): pid=21575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.291:4255878): pid=21575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21575 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.293:4255879): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.293:4255880): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.293:4255881): pid=21576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21576 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674680262.306:4255882): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_SESSION msg=audit(1674680262.374:4255883): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21568 suid=74 rport=52618 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.374:4255884): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21568 suid=74 rport=52618 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.376:4255885): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21569 suid=74 rport=52762 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.376:4255886): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21569 suid=74 rport=52762 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.384:4255887): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21570 suid=74 rport=52530 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.384:4255888): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21570 suid=74 rport=52530 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.391:4255889): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21571 suid=74 rport=52720 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.391:4255890): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21571 suid=74 rport=52720 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.393:4255891): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21573 suid=74 rport=52704 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.393:4255892): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21573 suid=74 rport=52704 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.394:4255893): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21572 suid=74 rport=52688 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.394:4255894): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21572 suid=74 rport=52688 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.395:4255895): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21574 suid=74 rport=52546 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.395:4255896): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21574 suid=74 rport=52546 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.398:4255897): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21575 suid=74 rport=52658 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.398:4255898): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21575 suid=74 rport=52658 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.399:4255899): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21576 suid=74 rport=52348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.399:4255900): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21576 suid=74 rport=52348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.553:4255901): pid=21577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.553:4255902): pid=21577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.553:4255903): pid=21577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21577 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.554:4255904): pid=21578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.554:4255905): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21577 suid=74 rport=52630 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.554:4255906): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21577 suid=74 rport=52630 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.554:4255907): pid=21578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.554:4255908): pid=21578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21578 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.558:4255909): pid=21579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.559:4255910): pid=21579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.559:4255911): pid=21579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21579 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.560:4255912): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21579 suid=74 rport=52592 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.560:4255913): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21579 suid=74 rport=52592 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.561:4255914): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21578 suid=74 rport=52604 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.561:4255915): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21578 suid=74 rport=52604 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.563:4255916): pid=21580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.563:4255917): pid=21580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.563:4255918): pid=21580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21580 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.564:4255919): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21580 suid=74 rport=52748 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680262.564:4255920): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21580 suid=74 rport=52748 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.602:4255921): pid=21582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.603:4255922): pid=21582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680262.603:4255923): pid=21582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21582 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_AUTH msg=audit(1674680262.708:4255924): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.007:4255925): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.036:4255926): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.040:4255927): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.058:4255928): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_SESSION msg=audit(1674680263.081:4255929): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21582 suid=74 rport=52660 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680263.081:4255930): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21582 suid=74 rport=52660 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=USER_AUTH msg=audit(1674680263.198:4255931): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.213:4255932): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.422:4255933): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.692:4255934): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.914:4255935): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.922:4255936): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.974:4255937): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.974:4255938): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680263.986:4255939): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.061:4255940): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.094:4255941): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21542 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.094:4255942): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21543 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.094:4255943): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21542 suid=74 rport=52432 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.094:4255944): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21543 suid=74 rport=52388 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.096:4255945): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.096:4255946): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.096:4255947): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.096:4255948): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21535 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.096:4255949): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.096:4255950): pid=21535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.096:4255951): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21533 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.096:4255952): pid=21533 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.113:4255953): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21540 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.113:4255954): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21540 suid=74 rport=52470 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.115:4255955): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.115:4255956): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.115:4255957): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21537 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.116:4255958): pid=21537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.128:4255959): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.238:4255960): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21545 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.238:4255961): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21545 suid=74 rport=52476 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.239:4255962): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.239:4255963): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.239:4255964): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21536 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.239:4255965): pid=21536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.297:4255966): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.495:4255967): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.503:4255968): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.505:4255969): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.506:4255970): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.590:4255971): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.638:4255972): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.663:4255973): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21539 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.663:4255974): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21539 suid=74 rport=52410 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.664:4255975): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.664:4255976): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.664:4255977): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21534 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.664:4255978): pid=21534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.676:4255979): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21550 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.676:4255980): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21550 suid=74 rport=52398 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.678:4255981): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.678:4255982): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.678:4255983): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21547 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.678:4255984): pid=21547 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.679:4255985): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21549 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.679:4255986): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21549 suid=74 rport=52422 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.680:4255987): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21544 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.680:4255988): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21544 suid=74 rport=52486 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.680:4255989): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.680:4255990): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.680:4255991): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21548 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.680:4255992): pid=21548 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.681:4255993): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.681:4255994): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.681:4255995): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21538 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.681:4255996): pid=21538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680264.811:4255997): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21541 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.811:4255998): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21541 suid=74 rport=52448 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.813:4255999): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.813:4256000): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680264.813:4256001): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680264.813:4256002): pid=21532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680264.992:4256003): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.095:4256004): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.124:4256005): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.127:4256006): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.145:4256007): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.229:4256008): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21569 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.229:4256009): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21569 suid=74 rport=52762 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.230:4256010): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.230:4256011): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.230:4256012): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21555 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.231:4256013): pid=21555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.256:4256015): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21571 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.256:4256014): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21570 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.256:4256016): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21570 suid=74 rport=52530 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.256:4256017): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21571 suid=74 rport=52720 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.257:4256018): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.258:4256019): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.258:4256020): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.258:4256021): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.258:4256022): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21556 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.258:4256024): pid=21556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.258:4256023): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.258:4256025): pid=21560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.271:4256026): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21573 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.271:4256027): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21573 suid=74 rport=52704 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.272:4256028): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.273:4256029): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.273:4256030): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21563 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.273:4256031): pid=21563 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.286:4256032): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.302:4256033): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.397:4256034): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21577 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.397:4256035): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21577 suid=74 rport=52630 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.399:4256036): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.399:4256037): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.399:4256038): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21561 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.399:4256039): pid=21561 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.415:4256040): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21580 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.415:4256041): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21580 suid=74 rport=52748 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.416:4256042): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.416:4256043): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.416:4256044): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21562 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.416:4256045): pid=21562 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.509:4256046): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.537:4256047): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21553 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.537:4256048): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21553 suid=74 rport=52472 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.539:4256049): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.539:4256050): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.539:4256051): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21552 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.539:4256052): pid=21552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.618:4256053): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21572 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.618:4256054): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21572 suid=74 rport=52688 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.619:4256055): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.619:4256056): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.619:4256057): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21559 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.619:4256058): pid=21559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.780:4256059): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680265.887:4256060): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21575 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.887:4256061): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21575 suid=74 rport=52658 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.889:4256062): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21564 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.890:4256063): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21564 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680265.890:4256064): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21564 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680265.890:4256065): pid=21564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680265.890:4256066): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.86.47.17 addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680266.002:4256067): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680266.010:4256068): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680266.110:4256069): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21578 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.110:4256070): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21578 suid=74 rport=52604 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.112:4256071): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.112:4256072): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.112:4256073): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21558 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680266.112:4256074): pid=21558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680266.116:4256075): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21582 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.116:4256076): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21582 suid=74 rport=52660 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.117:4256077): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.117:4256078): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.118:4256079): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21581 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680266.118:4256080): pid=21581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680266.618:4256081): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680266.801:4256082): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21574 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.801:4256083): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21574 suid=74 rport=52546 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.802:4256084): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.803:4256085): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680266.803:4256086): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21565 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680266.803:4256087): pid=21565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680266.856:4256088): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680267.058:4256089): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21568 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.058:4256090): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21568 suid=74 rport=52618 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.059:4256091): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.059:4256092): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.059:4256093): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21557 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680267.059:4256094): pid=21557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680267.197:4256095): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674680267.381:4256096): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674680267.381:4256096): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1f404e6010 items=0 ppid=21601 pid=21606 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680267.381:4256096): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674680267.387:4256097): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674680267.387:4256097): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0c4eb8d010 items=0 ppid=21601 pid=21607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680267.387:4256097): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674680267.392:4256098): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674680267.392:4256098): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f74edc3a010 items=0 ppid=21601 pid=21608 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680267.392:4256098): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674680267.398:4256099): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674680267.398:4256099): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2b02367010 items=0 ppid=21601 pid=21609 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680267.398:4256099): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=CRYPTO_KEY_USER msg=audit(1674680267.406:4256100): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21579 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.406:4256101): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21579 suid=74 rport=52592 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.407:4256102): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.407:4256103): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.407:4256104): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21566 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680267.407:4256105): pid=21566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680267.447:4256106): pid=21617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.447:4256107): pid=21617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.447:4256108): pid=21617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21617 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680267.448:4256109): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21617 suid=74 rport=52464 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680267.448:4256110): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=21617 suid=74 rport=52464 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.449:4256111): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21617 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.449:4256112): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21586 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.449:4256113): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21586 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680267.449:4256114): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21586 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680267.449:4256115): pid=21586 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674680267.691:4256116): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674680267.691:4256116): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb130287010 items=0 ppid=21601 pid=21619 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680267.691:4256116): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232302E38362E36382E3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674680267.696:4256117): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674680267.696:4256117): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f68134ea010 items=0 ppid=21601 pid=21620 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680267.696:4256117): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232302E38362E36382E3333002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674680267.701:4256118): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674680267.701:4256118): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa918cb4010 items=0 ppid=21601 pid=21621 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680267.701:4256118): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130332E38362E34372E3137002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674680267.706:4256119): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674680267.706:4256119): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fac3b01e010 items=0 ppid=21601 pid=21622 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680267.706:4256119): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130332E38362E34372E3137002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674680268.585:4256120): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680268.586:4256121): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21576 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680268.586:4256122): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=21576 suid=74 rport=52348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680268.587:4256123): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=21567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680268.587:4256124): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=21567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680268.587:4256125): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=21567 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680268.587:4256126): pid=21567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.86.47.17 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674680281.809:4256127): pid=21675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680281.809:4256128): pid=21676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680281.809:4256130): pid=21676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680281.809:4256129): pid=21675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680281.810:4256131): pid=21675 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258555 res=1
type=LOGIN msg=audit(1674680281.810:4256132): pid=21676 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258556 res=1
type=USER_START msg=audit(1674680281.852:4256133): pid=21675 uid=0 auid=0 ses=258555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674680281.852:4256134): pid=21676 uid=0 auid=1055 ses=258556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680281.854:4256135): pid=21675 uid=0 auid=0 ses=258555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680281.854:4256136): pid=21676 uid=0 auid=1055 ses=258556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680281.937:4256137): pid=21675 uid=0 auid=0 ses=258555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680281.940:4256138): pid=21675 uid=0 auid=0 ses=258555 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680282.217:4256139): pid=21676 uid=0 auid=1055 ses=258556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680282.219:4256140): pid=21676 uid=0 auid=1055 ses=258556 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680341.234:4256141): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680341.234:4256142): pid=21886 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680341.235:4256143): pid=21886 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258557 res=1
type=USER_START msg=audit(1674680341.244:4256144): pid=21886 uid=0 auid=1055 ses=258557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680341.246:4256145): pid=21886 uid=0 auid=1055 ses=258557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680341.504:4256146): pid=21886 uid=0 auid=1055 ses=258557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680341.506:4256147): pid=21886 uid=0 auid=1055 ses=258557 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674680385.097:4256148): avc: denied { read } for pid=22045 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674680385.097:4256148): avc: denied { open } for pid=22045 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680385.097:4256148): arch=c000003e syscall=2 success=yes exit=18 a0=558d9feb9f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680385.097:4256148): proctitle="dovecot/auth"
type=AVC msg=audit(1674680385.097:4256149): avc: denied { getattr } for pid=22045 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680385.097:4256149): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc81a0ed80 a2=7ffc81a0ed80 a3=fffffc00 items=0 ppid=5547 pid=22045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680385.097:4256149): proctitle="dovecot/auth"
type=AVC msg=audit(1674680391.866:4256150): avc: denied { name_connect } for pid=22045 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674680391.866:4256150): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc81a0eb70 a2=10 a3=7ffc81a0eb6c items=0 ppid=5547 pid=22045 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680391.866:4256150): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674680392.956:4256151): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674680392.956:4256151): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b1df8b55010 items=0 ppid=22070 pid=22075 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680392.956:4256151): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003230332E39392E3130362E313232002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674680393.291:4256152): pid=22076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680393.291:4256153): pid=22076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680393.291:4256154): pid=22076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680393.819:4256155): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=22076 suid=74 rport=39688 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680393.820:4256156): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=22076 suid=74 rport=39688 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674680394.656:4256157): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680396.062:4256158): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680396.334:4256159): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22076 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680396.334:4256160): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22076 suid=74 rport=39688 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680396.335:4256161): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680396.335:4256162): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680396.335:4256163): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22069 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680396.335:4256164): pid=22069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674680401.527:4256165): pid=22103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680401.527:4256166): pid=22104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680401.527:4256167): pid=22103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680401.527:4256168): pid=22103 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258558 res=1
type=CRED_ACQ msg=audit(1674680401.527:4256169): pid=22104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680401.527:4256170): pid=22104 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258559 res=1
type=USER_ACCT msg=audit(1674680401.533:4256171): pid=22105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680401.533:4256172): pid=22105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680401.533:4256173): pid=22105 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258560 res=1
type=USER_START msg=audit(1674680401.666:4256174): pid=22103 uid=0 auid=0 ses=258558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674680401.666:4256175): pid=22105 uid=0 auid=1055 ses=258560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674680401.666:4256176): pid=22104 uid=0 auid=0 ses=258559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680401.669:4256177): pid=22105 uid=0 auid=1055 ses=258560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680401.669:4256178): pid=22103 uid=0 auid=0 ses=258558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680401.671:4256179): pid=22104 uid=0 auid=0 ses=258559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680401.703:4256180): pid=22103 uid=0 auid=0 ses=258558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680401.712:4256181): pid=22103 uid=0 auid=0 ses=258558 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680402.069:4256182): pid=22105 uid=0 auid=1055 ses=258560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680402.074:4256183): pid=22105 uid=0 auid=1055 ses=258560 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674680402.663:4256184): avc: denied { name_connect } for pid=22045 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674680402.663:4256184): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc81a0eb70 a2=10 a3=7ffc81a0eb6c items=0 ppid=5547 pid=22045 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680402.663:4256184): proctitle="dovecot/auth"
type=AVC msg=audit(1674680402.710:4256185): avc: denied { write } for pid=22133 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674680402.710:4256185): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd2fd51740 a2=6e a3=63d19852 items=0 ppid=5547 pid=22133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680402.710:4256185): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674680405.124:4256186): pid=22104 uid=0 auid=0 ses=258559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680405.126:4256187): pid=22104 uid=0 auid=0 ses=258559 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674680428.950:4256188): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674680428.950:4256188): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6ade005010 items=0 ppid=22248 pid=22253 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680428.950:4256188): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3137342E3139322E323430002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674680457.775:4256189): avc: denied { write } for pid=22133 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674680457.775:4256189): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd2fd51740 a2=6e a3=63d19889 items=0 ppid=5547 pid=22133 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680457.775:4256189): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674680461.147:4256190): pid=22450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680461.148:4256191): pid=22450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680461.148:4256192): pid=22449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680461.148:4256193): pid=22449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680461.149:4256194): pid=22450 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258561 res=1
type=LOGIN msg=audit(1674680461.149:4256195): pid=22449 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258562 res=1
type=USER_START msg=audit(1674680461.184:4256196): pid=22450 uid=0 auid=1055 ses=258561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674680461.184:4256197): pid=22449 uid=0 auid=0 ses=258562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680461.186:4256198): pid=22450 uid=0 auid=1055 ses=258561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680461.186:4256199): pid=22449 uid=0 auid=0 ses=258562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680461.217:4256200): pid=22449 uid=0 auid=0 ses=258562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680461.219:4256201): pid=22449 uid=0 auid=0 ses=258562 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680461.453:4256202): pid=22450 uid=0 auid=1055 ses=258561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680461.455:4256203): pid=22450 uid=0 auid=1055 ses=258561 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680521.475:4256204): pid=22653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680521.475:4256205): pid=22653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680521.477:4256206): pid=22653 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258563 res=1
type=USER_START msg=audit(1674680521.495:4256207): pid=22653 uid=0 auid=1055 ses=258563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680521.497:4256208): pid=22653 uid=0 auid=1055 ses=258563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680521.737:4256209): pid=22653 uid=0 auid=1055 ses=258563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680521.740:4256210): pid=22653 uid=0 auid=1055 ses=258563 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680581.755:4256211): pid=22851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680581.755:4256212): pid=22851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680581.756:4256213): pid=22851 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258564 res=1
type=USER_START msg=audit(1674680581.771:4256214): pid=22851 uid=0 auid=1055 ses=258564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680581.772:4256215): pid=22851 uid=0 auid=1055 ses=258564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680582.091:4256216): pid=22851 uid=0 auid=1055 ses=258564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680582.093:4256217): pid=22851 uid=0 auid=1055 ses=258564 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674680616.347:4256218): avc: denied { read } for pid=22965 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674680616.347:4256218): avc: denied { open } for pid=22965 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680616.347:4256218): arch=c000003e syscall=2 success=yes exit=18 a0=55f153400f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680616.347:4256218): proctitle="dovecot/auth"
type=AVC msg=audit(1674680616.347:4256219): avc: denied { getattr } for pid=22965 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680616.347:4256219): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffc48c5510 a2=7fffc48c5510 a3=fffffc00 items=0 ppid=5547 pid=22965 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680616.347:4256219): proctitle="dovecot/auth"
type=AVC msg=audit(1674680617.768:4256220): avc: denied { name_connect } for pid=22965 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674680617.768:4256220): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffc48c5300 a2=10 a3=7fffc48c52fc items=0 ppid=5547 pid=22965 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680617.768:4256220): proctitle="dovecot/auth"
type=AVC msg=audit(1674680617.796:4256221): avc: denied { write } for pid=22969 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674680617.796:4256221): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc053aaa10 a2=6e a3=63d19929 items=0 ppid=5547 pid=22969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680617.796:4256221): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674680620.447:4256222): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680620.447:4256223): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680620.448:4256224): pid=22987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22987 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680620.590:4256225): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22987 suid=74 rport=19392 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680620.590:4256226): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=22987 suid=74 rport=19392 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=USER_AUTH msg=audit(1674680621.410:4256227): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=195.226.194.242 addr=195.226.194.242 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680622.645:4256228): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680622.791:4256229): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22987 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680622.791:4256230): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=22987 suid=74 rport=19392 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680622.793:4256231): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=22986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680622.793:4256232): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=22986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680622.793:4256233): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=22986 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680622.793:4256234): pid=22986 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674680641.107:4256235): pid=23044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680641.107:4256236): pid=23044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680641.108:4256237): pid=23044 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258565 res=1
type=USER_START msg=audit(1674680641.126:4256238): pid=23044 uid=0 auid=1055 ses=258565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680641.129:4256239): pid=23044 uid=0 auid=1055 ses=258565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680641.376:4256240): pid=23044 uid=0 auid=1055 ses=258565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680641.378:4256241): pid=23044 uid=0 auid=1055 ses=258565 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674680660.262:4256242): avc: denied { name_connect } for pid=22965 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674680660.262:4256242): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffc48c5300 a2=10 a3=7fffc48c52fc items=0 ppid=5547 pid=22965 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680660.262:4256242): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674680701.394:4256243): pid=23252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680701.394:4256244): pid=23251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680701.394:4256245): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680701.394:4256246): pid=23252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680701.394:4256247): pid=23251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680701.395:4256248): pid=23253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680701.396:4256249): pid=23251 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258566 res=1
type=LOGIN msg=audit(1674680701.396:4256250): pid=23252 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258567 res=1
type=LOGIN msg=audit(1674680701.396:4256251): pid=23253 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258568 res=1
type=USER_START msg=audit(1674680701.438:4256252): pid=23251 uid=0 auid=0 ses=258566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674680701.438:4256253): pid=23252 uid=0 auid=0 ses=258567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674680701.439:4256254): pid=23253 uid=0 auid=1055 ses=258568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680701.439:4256255): pid=23253 uid=0 auid=1055 ses=258568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680701.440:4256256): pid=23252 uid=0 auid=0 ses=258567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680701.441:4256257): pid=23251 uid=0 auid=0 ses=258566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680701.536:4256258): pid=23252 uid=0 auid=0 ses=258567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680701.541:4256259): pid=23252 uid=0 auid=0 ses=258567 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680701.769:4256260): pid=23253 uid=0 auid=1055 ses=258568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680701.773:4256261): pid=23253 uid=0 auid=1055 ses=258568 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674680703.127:4256262): avc: denied { read append } for pid=23278 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674680703.127:4256262): avc: denied { open } for pid=23278 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680703.127:4256262): arch=c000003e syscall=2 success=yes exit=8 a0=55d27aad3a60 a1=402 a2=7ffdb45d4040 a3=7ffdb45d3ae0 items=0 ppid=5547 pid=23278 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680703.127:4256262): proctitle="dovecot/imap"
type=AVC msg=audit(1674680703.127:4256263): avc: denied { getattr } for pid=23278 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680703.127:4256263): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffdb45d3fa0 a2=7ffdb45d3fa0 a3=7ffdb45d3a20 items=0 ppid=5547 pid=23278 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680703.127:4256263): proctitle="dovecot/imap"
type=AVC msg=audit(1674680703.127:4256264): avc: denied { write } for pid=23278 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680703.127:4256264): arch=c000003e syscall=2 success=yes exit=10 a0=55d27aad8990 a1=2 a2=7ffdb45d3d40 a3=7ffdb45d37e0 items=0 ppid=5547 pid=23278 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680703.127:4256264): proctitle="dovecot/imap"
type=AVC msg=audit(1674680703.128:4256265): avc: denied { lock } for pid=23278 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680703.128:4256265): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffdb45d3c40 a3=63d1997f items=0 ppid=5547 pid=23278 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680703.128:4256265): proctitle="dovecot/imap"
type=AVC msg=audit(1674680703.128:4256266): avc: denied { read } for pid=23278 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674680703.128:4256266): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55d27ab01300 a2=90800 a3=0 items=0 ppid=5547 pid=23278 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680703.128:4256266): proctitle="dovecot/imap"
type=AVC msg=audit(1674680703.129:4256267): avc: denied { getattr } for pid=23278 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680703.129:4256267): arch=c000003e syscall=4 success=yes exit=0 a0=55d27aac3a60 a1=7ffdb45d3ff0 a2=7ffdb45d3ff0 a3=6f632e6f72676173 items=0 ppid=5547 pid=23278 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680703.129:4256267): proctitle="dovecot/imap"
type=CRED_DISP msg=audit(1674680704.758:4256268): pid=23251 uid=0 auid=0 ses=258566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680704.760:4256269): pid=23251 uid=0 auid=0 ses=258566 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674680704.993:4256270): avc: denied { write } for pid=23286 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674680704.993:4256270): arch=c000003e syscall=21 success=yes exit=0 a0=5586b09024c0 a1=2 a2=7b48 a3=7ffd482b9f20 items=0 ppid=5547 pid=23286 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680704.993:4256270): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674680713.127:4256271): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680713.127:4256272): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680713.127:4256273): pid=23315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23315 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680713.275:4256274): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23315 suid=74 rport=42089 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680713.275:4256275): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23315 suid=74 rport=42089 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=USER_AUTH msg=audit(1674680713.971:4256276): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.111.224.128 addr=82.111.224.128 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680715.502:4256277): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680715.653:4256278): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23315 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680715.653:4256279): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23315 suid=74 rport=42089 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680715.655:4256280): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680715.655:4256281): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680715.655:4256282): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23314 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680715.655:4256283): pid=23314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674680761.779:4256284): pid=23470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680761.779:4256285): pid=23470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680761.780:4256286): pid=23470 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258569 res=1
type=USER_START msg=audit(1674680761.799:4256287): pid=23470 uid=0 auid=1055 ses=258569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680761.803:4256288): pid=23470 uid=0 auid=1055 ses=258569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680762.161:4256289): pid=23470 uid=0 auid=1055 ses=258569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680762.163:4256290): pid=23470 uid=0 auid=1055 ses=258569 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674680766.031:4256291): avc: denied { name_connect } for pid=22965 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674680766.031:4256291): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fffc48c5300 a2=10 a3=7fffc48c52fc items=0 ppid=5547 pid=22965 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680766.031:4256291): proctitle="dovecot/auth"
type=AVC msg=audit(1674680766.065:4256292): avc: denied { write } for pid=23539 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674680766.065:4256292): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff10ab2ce0 a2=6e a3=63d199be items=0 ppid=5547 pid=23539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680766.065:4256292): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674680819.706:4256293): avc: denied { write } for pid=23539 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674680819.706:4256293): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff10ab2ce0 a2=6e a3=63d199f3 items=0 ppid=5547 pid=23539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680819.706:4256293): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674680821.184:4256294): pid=23766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680821.184:4256295): pid=23766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680821.185:4256296): pid=23766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258570 res=1
type=USER_START msg=audit(1674680821.199:4256297): pid=23766 uid=0 auid=1055 ses=258570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680821.200:4256298): pid=23766 uid=0 auid=1055 ses=258570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680821.433:4256299): pid=23766 uid=0 auid=1055 ses=258570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680821.435:4256300): pid=23766 uid=0 auid=1055 ses=258570 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674680880.783:4256301): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680880.783:4256302): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680880.783:4256303): pid=23957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23957 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680881.127:4256304): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23957 suid=74 rport=47680 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674680881.127:4256305): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23957 suid=74 rport=47680 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=? res=success'
type=USER_ACCT msg=audit(1674680881.451:4256306): pid=23960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680881.451:4256307): pid=23960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680881.451:4256308): pid=23960 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258571 res=1
type=USER_START msg=audit(1674680881.468:4256309): pid=23960 uid=0 auid=1055 ses=258571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680881.472:4256310): pid=23960 uid=0 auid=1055 ses=258571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680881.734:4256311): pid=23960 uid=0 auid=1055 ses=258571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680881.736:4256312): pid=23960 uid=0 auid=1055 ses=258571 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674680882.633:4256313): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=200.69.196.27 addr=200.69.196.27 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674680884.365:4256314): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674680884.713:4256315): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23957 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680884.713:4256316): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23957 suid=74 rport=47680 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680884.714:4256317): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680884.714:4256318): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674680884.714:4256319): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23956 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674680884.714:4256320): pid=23956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=200.69.196.27 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674680888.212:4256321): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674680888.212:4256321): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f259a026010 items=0 ppid=23991 pid=23994 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680888.212:4256321): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674680888.216:4256322): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674680888.216:4256322): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fedeab48010 items=0 ppid=23991 pid=23995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680888.216:4256322): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674680888.220:4256323): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674680888.220:4256323): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3692f12010 items=0 ppid=23991 pid=23996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680888.220:4256323): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674680888.223:4256324): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674680888.223:4256324): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1098cbe010 items=0 ppid=23991 pid=23997 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680888.223:4256324): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674680888.510:4256325): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674680888.510:4256325): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe93c006010 items=0 ppid=23991 pid=24005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680888.510:4256325): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232302E3133352E3133302E313738002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674680888.516:4256326): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674680888.516:4256326): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3bb82a9010 items=0 ppid=23991 pid=24006 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680888.516:4256326): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232302E3133352E3133302E313738002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674680888.522:4256327): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674680888.522:4256327): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7587525010 items=0 ppid=23991 pid=24007 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680888.522:4256327): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003230302E36392E3139362E3237002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674680888.527:4256328): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674680888.527:4256328): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f50a43ca010 items=0 ppid=23991 pid=24008 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680888.527:4256328): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003230302E36392E3139362E3237002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674680936.426:4256329): avc: denied { read } for pid=24182 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674680936.426:4256329): avc: denied { open } for pid=24182 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680936.426:4256329): arch=c000003e syscall=2 success=yes exit=18 a0=564f73e7df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=24182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680936.426:4256329): proctitle="dovecot/auth"
type=AVC msg=audit(1674680936.426:4256330): avc: denied { getattr } for pid=24182 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674680936.426:4256330): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff3dddd4c0 a2=7fff3dddd4c0 a3=fffffc00 items=0 ppid=5547 pid=24182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680936.426:4256330): proctitle="dovecot/auth"
type=AVC msg=audit(1674680937.891:4256331): avc: denied { name_connect } for pid=24182 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674680937.891:4256331): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff3dddd2b0 a2=10 a3=7fff3dddd2ac items=0 ppid=5547 pid=24182 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680937.891:4256331): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674680941.756:4256332): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674680941.756:4256333): pid=24204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680941.756:4256334): pid=24205 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674680941.756:4256335): pid=24204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674680941.757:4256336): pid=24204 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258572 res=1
type=LOGIN msg=audit(1674680941.757:4256337): pid=24205 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258573 res=1
type=USER_START msg=audit(1674680941.795:4256338): pid=24205 uid=0 auid=1055 ses=258573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674680941.796:4256339): pid=24204 uid=0 auid=0 ses=258572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680941.797:4256340): pid=24205 uid=0 auid=1055 ses=258573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674680941.798:4256341): pid=24204 uid=0 auid=0 ses=258572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680942.059:4256342): pid=24205 uid=0 auid=1055 ses=258573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680942.061:4256343): pid=24205 uid=0 auid=1055 ses=258573 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674680942.891:4256344): pid=24204 uid=0 auid=0 ses=258572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674680942.894:4256345): pid=24204 uid=0 auid=0 ses=258572 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674680948.651:4256346): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674680948.651:4256346): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b11168af010 items=0 ppid=24238 pid=24243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680948.651:4256346): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034392E39312E3234332E3130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543231
type=NETFILTER_CFG msg=audit(1674680952.988:4256347): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674680952.988:4256347): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad0751b5010 items=0 ppid=24254 pid=24259 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680952.988:4256347): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3137352E3132312E323130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674680964.521:4256348): avc: denied { name_connect } for pid=24182 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674680964.521:4256348): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff3dddd2b0 a2=10 a3=7fff3dddd2ac items=0 ppid=5547 pid=24182 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674680964.521:4256348): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674681001.911:4256349): pid=24410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681001.911:4256350): pid=24410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681001.911:4256351): pid=24410 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258574 res=1
type=USER_ACCT msg=audit(1674681001.921:4256352): pid=24413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681001.921:4256353): pid=24413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681001.922:4256354): pid=24413 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258575 res=1
type=USER_ACCT msg=audit(1674681001.923:4256355): pid=24411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681001.923:4256356): pid=24411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681001.923:4256357): pid=24411 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258576 res=1
type=USER_START msg=audit(1674681001.998:4256358): pid=24411 uid=0 auid=0 ses=258576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674681001.998:4256359): pid=24410 uid=0 auid=0 ses=258574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674681002.000:4256360): pid=24413 uid=0 auid=1055 ses=258575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681002.001:4256361): pid=24410 uid=0 auid=0 ses=258574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681002.001:4256362): pid=24411 uid=0 auid=0 ses=258576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681002.001:4256363): pid=24413 uid=0 auid=1055 ses=258575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681002.031:4256364): pid=24410 uid=0 auid=0 ses=258574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681002.035:4256365): pid=24410 uid=0 auid=0 ses=258574 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681002.368:4256366): pid=24413 uid=0 auid=1055 ses=258575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681002.371:4256367): pid=24413 uid=0 auid=1055 ses=258575 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674681004.362:4256368): pid=24440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681004.362:4256369): pid=24440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681004.362:4256370): pid=24440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24440 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681004.523:4256371): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24440 suid=74 rport=37042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681004.524:4256372): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24440 suid=74 rport=37042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=USER_AUTH msg=audit(1674681005.266:4256373): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.111.224.128 addr=82.111.224.128 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674681005.364:4256374): pid=24411 uid=0 auid=0 ses=258576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681005.368:4256375): pid=24411 uid=0 auid=0 ses=258576 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674681007.550:4256376): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681007.730:4256377): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24440 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681007.730:4256378): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24440 suid=74 rport=37042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681007.732:4256379): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24439 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681007.732:4256380): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24439 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681007.732:4256381): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24439 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681007.732:4256382): pid=24439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=ssh res=failed'
type=AVC msg=audit(1674681028.990:4256383): avc: denied { name_connect } for pid=24182 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674681028.990:4256383): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff3dddd2b0 a2=10 a3=7fff3dddd2ac items=0 ppid=5547 pid=24182 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681028.990:4256383): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674681030.085:4256384): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674681030.085:4256384): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad78f686010 items=0 ppid=24540 pid=24545 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681030.085:4256384): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131382E3138332E3138352E3130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674681030.132:4256385): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674681030.132:4256385): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b1555482010 items=0 ppid=24540 pid=24550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681030.132:4256385): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131382E3138332E3138352E3130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674681035.739:4256386): avc: denied { write } for pid=24565 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674681035.739:4256386): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5e4e3d80 a2=6e a3=63d19acb items=0 ppid=5547 pid=24565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681035.739:4256386): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674681061.385:4256387): pid=24639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681061.385:4256388): pid=24639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681061.386:4256389): pid=24639 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258577 res=1
type=USER_START msg=audit(1674681061.402:4256390): pid=24639 uid=0 auid=1055 ses=258577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681061.404:4256391): pid=24639 uid=0 auid=1055 ses=258577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681061.624:4256392): pid=24639 uid=0 auid=1055 ses=258577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681061.626:4256393): pid=24639 uid=0 auid=1055 ses=258577 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674681067.333:4256394): pid=24669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681067.334:4256395): pid=24669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681067.334:4256396): pid=24669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24669 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681067.486:4256397): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24669 suid=74 rport=48307 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681067.486:4256398): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24669 suid=74 rport=48307 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=USER_AUTH msg=audit(1674681068.199:4256399): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=82.111.224.128 addr=82.111.224.128 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681070.798:4256400): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681070.954:4256401): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24669 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681070.954:4256402): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24669 suid=74 rport=48307 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681070.956:4256403): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681070.956:4256404): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681070.956:4256405): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681070.956:4256406): pid=24668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=82.111.224.128 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674681072.334:4256407): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674681072.334:4256407): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f632cff1010 items=0 ppid=24687 pid=24690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681072.334:4256407): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674681072.338:4256408): table=filter family=2 entries=1066
type=SYSCALL msg=audit(1674681072.338:4256408): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f23c73cd010 items=0 ppid=24687 pid=24691 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681072.338:4256408): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674681072.342:4256409): table=filter family=2 entries=1067
type=SYSCALL msg=audit(1674681072.342:4256409): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feed92c3010 items=0 ppid=24687 pid=24692 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681072.342:4256409): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674681072.346:4256410): table=filter family=2 entries=1066
type=SYSCALL msg=audit(1674681072.346:4256410): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa7fa599010 items=0 ppid=24687 pid=24693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681072.346:4256410): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674681072.654:4256411): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674681072.654:4256411): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f55fb479010 items=0 ppid=24687 pid=24701 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681072.654:4256411): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003139352E3232362E3139342E313432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681072.661:4256412): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674681072.661:4256412): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9a5556e010 items=0 ppid=24687 pid=24702 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681072.661:4256412): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003139352E3232362E3139342E313432002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674681072.667:4256413): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674681072.667:4256413): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcccb1e3010 items=0 ppid=24687 pid=24703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681072.667:4256413): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038322E3131312E3232342E313238002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681072.673:4256414): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674681072.673:4256414): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8f6cd64010 items=0 ppid=24687 pid=24704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681072.673:4256414): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038322E3131312E3232342E313238002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674681075.891:4256415): avc: denied { write } for pid=24565 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674681075.891:4256415): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5e4e3d80 a2=6e a3=63d19af3 items=0 ppid=5547 pid=24565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681075.891:4256415): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674681121.648:4256416): pid=24972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681121.649:4256417): pid=24972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681121.650:4256418): pid=24972 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258578 res=1
type=USER_START msg=audit(1674681121.672:4256419): pid=24972 uid=0 auid=1055 ses=258578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681121.674:4256420): pid=24972 uid=0 auid=1055 ses=258578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681121.902:4256421): pid=24972 uid=0 auid=1055 ses=258578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681121.904:4256422): pid=24972 uid=0 auid=1055 ses=258578 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674681128.550:4256423): pid=25004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681128.550:4256424): pid=25004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681128.550:4256425): pid=25004 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25004 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681128.776:4256426): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=25004 suid=74 rport=62057 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.2.88.45 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681128.776:4256427): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=25004 suid=74 rport=62057 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.2.88.45 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681130.269:4256428): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25004 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681130.269:4256429): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25004 suid=74 rport=62057 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.2.88.45 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681130.271:4256430): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681130.271:4256431): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681130.271:4256432): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25002 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681130.271:4256433): pid=25002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.2.88.45 terminal=ssh res=failed'
type=AVC msg=audit(1674681152.728:4256434): avc: denied { name_connect } for pid=24182 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674681152.728:4256434): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff3dddd2b0 a2=10 a3=7fff3dddd2ac items=0 ppid=5547 pid=24182 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681152.728:4256434): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674681181.921:4256435): pid=25169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681181.922:4256436): pid=25169 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681181.922:4256437): pid=25170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681181.922:4256438): pid=25170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681181.923:4256439): pid=25169 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258579 res=1
type=LOGIN msg=audit(1674681181.923:4256440): pid=25170 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258580 res=1
type=USER_START msg=audit(1674681181.957:4256441): pid=25170 uid=0 auid=1055 ses=258580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681181.958:4256442): pid=25170 uid=0 auid=1055 ses=258580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674681181.961:4256443): pid=25169 uid=0 auid=0 ses=258579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681181.962:4256444): pid=25169 uid=0 auid=0 ses=258579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681182.006:4256445): pid=25169 uid=0 auid=0 ses=258579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681182.009:4256446): pid=25169 uid=0 auid=0 ses=258579 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681182.202:4256447): pid=25170 uid=0 auid=1055 ses=258580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681182.204:4256448): pid=25170 uid=0 auid=1055 ses=258580 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681241.218:4256449): pid=25376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681241.219:4256450): pid=25376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681241.219:4256451): pid=25376 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258581 res=1
type=USER_START msg=audit(1674681241.229:4256452): pid=25376 uid=0 auid=1055 ses=258581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681241.231:4256453): pid=25376 uid=0 auid=1055 ses=258581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681241.540:4256454): pid=25376 uid=0 auid=1055 ses=258581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681241.543:4256455): pid=25376 uid=0 auid=1055 ses=258581 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681301.557:4256456): pid=25578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681301.557:4256457): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681301.557:4256458): pid=25578 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681301.557:4256459): pid=25579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681301.557:4256460): pid=25578 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258582 res=1
type=LOGIN msg=audit(1674681301.557:4256461): pid=25579 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258583 res=1
type=USER_START msg=audit(1674681301.568:4256462): pid=25579 uid=0 auid=1055 ses=258583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681301.568:4256463): pid=25579 uid=0 auid=1055 ses=258583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674681301.586:4256464): pid=25578 uid=0 auid=0 ses=258582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681301.587:4256465): pid=25578 uid=0 auid=0 ses=258582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681301.910:4256466): pid=25579 uid=0 auid=1055 ses=258583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681301.914:4256467): pid=25579 uid=0 auid=1055 ses=258583 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681304.922:4256468): pid=25578 uid=0 auid=0 ses=258582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681304.924:4256469): pid=25578 uid=0 auid=0 ses=258582 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681361.940:4256470): pid=25771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681361.940:4256471): pid=25771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681361.942:4256472): pid=25771 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258584 res=1
type=USER_START msg=audit(1674681361.955:4256473): pid=25771 uid=0 auid=1055 ses=258584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681361.957:4256474): pid=25771 uid=0 auid=1055 ses=258584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681362.232:4256475): pid=25771 uid=0 auid=1055 ses=258584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681362.234:4256476): pid=25771 uid=0 auid=1055 ses=258584 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674681395.064:4256477): avc: denied { read } for pid=25890 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674681395.064:4256477): avc: denied { open } for pid=25890 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681395.064:4256477): arch=c000003e syscall=2 success=yes exit=18 a0=559a3e00df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=25890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681395.064:4256477): proctitle="dovecot/auth"
type=AVC msg=audit(1674681395.064:4256478): avc: denied { getattr } for pid=25890 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681395.064:4256478): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffeb8522cb0 a2=7ffeb8522cb0 a3=fffffc00 items=0 ppid=5547 pid=25890 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681395.064:4256478): proctitle="dovecot/auth"
type=AVC msg=audit(1674681397.121:4256479): avc: denied { name_connect } for pid=25890 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674681397.121:4256479): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffeb8522aa0 a2=10 a3=7ffeb8522a9c items=0 ppid=5547 pid=25890 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681397.121:4256479): proctitle="dovecot/auth"
type=AVC msg=audit(1674681397.149:4256480): avc: denied { write } for pid=25952 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674681397.149:4256480): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc1f66d110 a2=6e a3=63d19c35 items=0 ppid=5547 pid=25952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681397.149:4256480): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674681399.376:4256481): avc: denied { write } for pid=25952 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674681399.376:4256481): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc1f66d110 a2=6e a3=63d19c37 items=0 ppid=5547 pid=25952 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681399.376:4256481): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674681421.253:4256482): pid=26073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681421.253:4256483): pid=26073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681421.253:4256484): pid=26073 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258585 res=1
type=USER_START msg=audit(1674681421.269:4256485): pid=26073 uid=0 auid=1055 ses=258585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681421.270:4256486): pid=26073 uid=0 auid=1055 ses=258585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681421.582:4256487): pid=26073 uid=0 auid=1055 ses=258585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681421.585:4256488): pid=26073 uid=0 auid=1055 ses=258585 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674681440.533:4256489): avc: denied { name_connect } for pid=25890 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674681440.533:4256489): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffeb8522aa0 a2=10 a3=7ffeb8522a9c items=0 ppid=5547 pid=25890 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681440.533:4256489): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674681481.598:4256490): pid=26270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681481.598:4256491): pid=26270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681481.599:4256492): pid=26270 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258586 res=1
type=USER_START msg=audit(1674681481.612:4256493): pid=26270 uid=0 auid=1055 ses=258586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681481.614:4256494): pid=26270 uid=0 auid=1055 ses=258586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681481.879:4256495): pid=26270 uid=0 auid=1055 ses=258586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681481.881:4256496): pid=26270 uid=0 auid=1055 ses=258586 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681541.897:4256497): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681541.898:4256498): pid=26493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681541.898:4256499): pid=26493 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258587 res=1
type=USER_START msg=audit(1674681541.914:4256500): pid=26493 uid=0 auid=1055 ses=258587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681541.915:4256501): pid=26493 uid=0 auid=1055 ses=258587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681542.228:4256502): pid=26493 uid=0 auid=1055 ses=258587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681542.229:4256503): pid=26493 uid=0 auid=1055 ses=258587 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681601.242:4256505): pid=26667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681601.242:4256506): pid=26669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681601.242:4256504): pid=26668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681601.242:4256507): pid=26670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681601.242:4256508): pid=26668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681601.242:4256509): pid=26667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681601.242:4256510): pid=26669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681601.242:4256511): pid=26670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681601.243:4256512): pid=26667 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258588 res=1
type=LOGIN msg=audit(1674681601.243:4256513): pid=26668 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258589 res=1
type=LOGIN msg=audit(1674681601.243:4256514): pid=26670 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258590 res=1
type=LOGIN msg=audit(1674681601.243:4256515): pid=26669 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258591 res=1
type=USER_START msg=audit(1674681601.290:4256516): pid=26667 uid=0 auid=0 ses=258588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674681601.290:4256517): pid=26668 uid=0 auid=0 ses=258589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674681601.291:4256518): pid=26670 uid=0 auid=1055 ses=258590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674681601.292:4256519): pid=26669 uid=0 auid=0 ses=258591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681601.292:4256520): pid=26667 uid=0 auid=0 ses=258588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681601.293:4256521): pid=26668 uid=0 auid=0 ses=258589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681601.293:4256522): pid=26669 uid=0 auid=0 ses=258591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681601.293:4256523): pid=26670 uid=0 auid=1055 ses=258590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681601.320:4256524): pid=26667 uid=0 auid=0 ses=258588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681601.324:4256525): pid=26667 uid=0 auid=0 ses=258588 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681601.380:4256526): pid=26669 uid=0 auid=0 ses=258591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681601.382:4256527): pid=26669 uid=0 auid=0 ses=258591 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681601.600:4256528): pid=26670 uid=0 auid=1055 ses=258590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681601.603:4256529): pid=26670 uid=0 auid=1055 ses=258590 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681604.626:4256530): pid=26668 uid=0 auid=0 ses=258589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681604.629:4256531): pid=26668 uid=0 auid=0 ses=258589 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674681604.828:4256532): table=filter family=2 entries=1064
type=SYSCALL msg=audit(1674681604.828:4256532): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2afeaf664010 items=0 ppid=1588 pid=26708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.828:4256532): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3138362E3133362E33362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A32333A3131002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.832:4256533): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674681604.832:4256533): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ae2f415e010 items=0 ppid=1588 pid=26709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.832:4256533): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231392E3133392E3133312E32312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A32373A3037002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.836:4256534): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674681604.836:4256534): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b5604b3e010 items=0 ppid=1588 pid=26710 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.836:4256534): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131372E36392E3235352E3233392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A33333A3032002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.841:4256535): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674681604.841:4256535): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b52d9975010 items=0 ppid=1588 pid=26711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.841:4256535): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E34362E37382E37342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A33333A3132002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.845:4256536): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674681604.845:4256536): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6a36bee010 items=0 ppid=1588 pid=26712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.845:4256536): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131362E3233362E35352E31302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A33333A3437002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.849:4256537): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674681604.849:4256537): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b304b33b010 items=0 ppid=1588 pid=26713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.849:4256537): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3139302E38392E3230302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A33373A3038002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.854:4256538): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674681604.854:4256538): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aace91ac010 items=0 ppid=1588 pid=26714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.854:4256538): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3137322E37332E332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A33373A3233002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.859:4256539): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674681604.859:4256539): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b4703b2f010 items=0 ppid=1588 pid=26715 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.859:4256539): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003230332E39392E3130362E39382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A35313A3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.864:4256540): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674681604.864:4256540): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac1e8cc4010 items=0 ppid=1588 pid=26716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.864:4256540): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035382E35362E3135332E3231342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A35323A3539002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.869:4256541): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674681604.869:4256541): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b508f511010 items=0 ppid=1588 pid=26717 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.869:4256541): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3136372E31392E33302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A35333A3034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.874:4256542): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674681604.874:4256542): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b760aea4010 items=0 ppid=1588 pid=26718 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.874:4256542): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131372E37332E31302E3233322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432303A35363A3538002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.879:4256543): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674681604.879:4256543): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b7ed6d1d010 items=0 ppid=1588 pid=26719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.879:4256543): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730035382E3232322E3130362E3130362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A30323A3338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.884:4256544): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674681604.884:4256544): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b5ad33a9010 items=0 ppid=1588 pid=26720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.884:4256544): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E32362E3132382E3137372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A30353A3230002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681604.889:4256545): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674681604.889:4256545): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2abe4f2d5010 items=0 ppid=1588 pid=26721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681604.889:4256545): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003134312E39382E31312E34372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A31373A3235002D6A0044524F50
type=AVC msg=audit(1674681611.949:4256546): avc: denied { read } for pid=26741 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674681611.949:4256546): avc: denied { open } for pid=26741 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681611.949:4256546): arch=c000003e syscall=2 success=yes exit=18 a0=564177a23f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=26741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681611.949:4256546): proctitle="dovecot/auth"
type=AVC msg=audit(1674681611.949:4256547): avc: denied { getattr } for pid=26741 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681611.949:4256547): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff4871a030 a2=7fff4871a030 a3=fffffc00 items=0 ppid=5547 pid=26741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681611.949:4256547): proctitle="dovecot/auth"
type=AVC msg=audit(1674681613.317:4256548): avc: denied { name_connect } for pid=26741 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674681613.317:4256548): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff48719e20 a2=10 a3=7fff48719e1c items=0 ppid=5547 pid=26741 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681613.317:4256548): proctitle="dovecot/auth"
type=AVC msg=audit(1674681613.346:4256549): avc: denied { write } for pid=26746 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674681613.346:4256549): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff540b0090 a2=6e a3=63d19d0d items=0 ppid=5547 pid=26746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681613.346:4256549): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674681613.421:4256550): pid=26750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681613.422:4256551): pid=26750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681613.422:4256552): pid=26750 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26750 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681613.599:4256553): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26750 suid=74 rport=44944 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681613.600:4256554): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26750 suid=74 rport=44944 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=? res=success'
type=AVC msg=audit(1674681613.867:4256555): avc: denied { read append } for pid=26748 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674681613.867:4256555): avc: denied { open } for pid=26748 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681613.867:4256555): arch=c000003e syscall=2 success=yes exit=8 a0=5646d1a4ca60 a1=402 a2=7ffd0bcc8b80 a3=7ffd0bcc8620 items=0 ppid=5547 pid=26748 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681613.867:4256555): proctitle="dovecot/imap"
type=AVC msg=audit(1674681613.867:4256556): avc: denied { getattr } for pid=26748 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681613.867:4256556): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffd0bcc8ae0 a2=7ffd0bcc8ae0 a3=7ffd0bcc8560 items=0 ppid=5547 pid=26748 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681613.867:4256556): proctitle="dovecot/imap"
type=AVC msg=audit(1674681613.867:4256557): avc: denied { write } for pid=26748 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681613.867:4256557): arch=c000003e syscall=2 success=yes exit=10 a0=5646d1a51960 a1=2 a2=7ffd0bcc8880 a3=7ffd0bcc8320 items=0 ppid=5547 pid=26748 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681613.867:4256557): proctitle="dovecot/imap"
type=AVC msg=audit(1674681613.868:4256558): avc: denied { lock } for pid=26748 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681613.868:4256558): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffd0bcc8780 a3=63d19d0d items=0 ppid=5547 pid=26748 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681613.868:4256558): proctitle="dovecot/imap"
type=AVC msg=audit(1674681613.868:4256559): avc: denied { read } for pid=26748 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674681613.868:4256559): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5646d1a7a300 a2=90800 a3=0 items=0 ppid=5547 pid=26748 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681613.868:4256559): proctitle="dovecot/imap"
type=AVC msg=audit(1674681613.868:4256560): avc: denied { getattr } for pid=26748 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681613.868:4256560): arch=c000003e syscall=4 success=yes exit=0 a0=5646d1a3ca60 a1=7ffd0bcc8b30 a2=7ffd0bcc8b30 a3=6f632e6f72676173 items=0 ppid=5547 pid=26748 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681613.868:4256560): proctitle="dovecot/imap"
type=USER_AUTH msg=audit(1674681614.442:4256561): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=94.153.212.78 addr=94.153.212.78 terminal=ssh res=failed'
type=AVC msg=audit(1674681615.974:4256562): avc: denied { write } for pid=26757 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674681615.974:4256562): arch=c000003e syscall=21 success=yes exit=0 a0=559533f2e4c0 a1=2 a2=7b48 a3=7ffd5aed6e60 items=0 ppid=5547 pid=26757 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681615.974:4256562): proctitle="dovecot/imap"
type=USER_AUTH msg=audit(1674681617.002:4256563): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681617.183:4256564): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26750 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681617.183:4256565): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26750 suid=74 rport=44944 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681617.184:4256566): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681617.184:4256567): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681617.184:4256568): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26749 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681617.184:4256569): pid=26749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674681661.650:4256570): pid=26905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681661.651:4256571): pid=26905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681661.652:4256572): pid=26905 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258592 res=1
type=USER_START msg=audit(1674681661.679:4256573): pid=26905 uid=0 auid=1055 ses=258592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681661.681:4256574): pid=26905 uid=0 auid=1055 ses=258592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681661.994:4256575): pid=26905 uid=0 auid=1055 ses=258592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681661.997:4256576): pid=26905 uid=0 auid=1055 ses=258592 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681665.515:4256577): pid=26927 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.515:4256578): pid=26927 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.515:4256579): pid=26927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.534:4256580): pid=26927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.537:4256581): pid=26927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.537:4256582): pid=26927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681665.559:4256583): pid=26932 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.559:4256584): pid=26932 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.560:4256585): pid=26932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.573:4256586): pid=26932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.576:4256587): pid=26932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.576:4256588): pid=26932 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681665.597:4256589): pid=26936 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.597:4256590): pid=26936 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.598:4256591): pid=26936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.610:4256592): pid=26936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.613:4256593): pid=26936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.613:4256594): pid=26936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681665.735:4256595): pid=26943 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.735:4256596): pid=26943 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.735:4256597): pid=26943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.749:4256598): pid=26943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.752:4256599): pid=26943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.752:4256600): pid=26943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681665.774:4256601): pid=26948 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.774:4256602): pid=26948 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.774:4256603): pid=26948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.787:4256604): pid=26948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.790:4256605): pid=26948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.790:4256606): pid=26948 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681665.812:4256607): pid=26951 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.812:4256608): pid=26951 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.812:4256609): pid=26951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.826:4256610): pid=26951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.829:4256611): pid=26951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.829:4256612): pid=26951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681665.864:4256613): pid=26957 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.865:4256614): pid=26957 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.865:4256615): pid=26957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.883:4256616): pid=26957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.887:4256617): pid=26957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.887:4256618): pid=26957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681665.910:4256619): pid=26961 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.910:4256620): pid=26961 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.910:4256621): pid=26961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.924:4256622): pid=26961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.928:4256623): pid=26961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.928:4256624): pid=26961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681665.953:4256625): pid=26966 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681665.953:4256626): pid=26966 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674681665.954:4256627): pid=26966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681665.973:4256628): pid=26966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681665.977:4256629): pid=26966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681665.977:4256630): pid=26966 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681666.001:4256631): pid=26972 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681666.001:4256632): pid=26972 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674681666.001:4256633): pid=26972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681666.020:4256634): pid=26972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681666.024:4256635): pid=26972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681666.024:4256636): pid=26972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681666.045:4256637): pid=26977 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681666.046:4256638): pid=26977 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674681666.046:4256639): pid=26977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681666.059:4256640): pid=26977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681666.063:4256641): pid=26977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681666.063:4256642): pid=26977 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681668.727:4256643): pid=26993 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681668.727:4256644): pid=26993 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674681668.728:4256645): pid=26993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681668.742:4256646): pid=26993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681668.797:4256647): pid=26993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681668.797:4256648): pid=26993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681668.827:4256649): pid=26999 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681668.827:4256650): pid=26999 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674681668.827:4256651): pid=26999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681668.841:4256652): pid=26999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681668.918:4256653): pid=26999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681668.918:4256654): pid=26999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681668.940:4256655): pid=27005 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681668.941:4256656): pid=27005 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674681668.941:4256657): pid=27005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681668.954:4256658): pid=27005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681669.064:4256659): pid=27005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681669.064:4256660): pid=27005 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681669.101:4256661): pid=27012 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681669.101:4256662): pid=27012 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674681669.101:4256663): pid=27012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681669.114:4256664): pid=27012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681669.117:4256665): pid=27012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681669.117:4256666): pid=27012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681669.138:4256667): pid=27016 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681669.139:4256668): pid=27016 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D5836547166694F3636717A646737636D2E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674681669.139:4256669): pid=27016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681669.153:4256670): pid=27016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681669.156:4256671): pid=27016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681669.156:4256672): pid=27016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681669.177:4256673): pid=27022 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681669.177:4256674): pid=27022 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D5836547166694F3636717A646737636D2E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674681669.177:4256675): pid=27022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681669.190:4256676): pid=27022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681669.195:4256677): pid=27022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681669.195:4256678): pid=27022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681669.216:4256679): pid=27029 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681669.216:4256680): pid=27029 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D5836547166694F3636717A646737636D2E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674681669.216:4256681): pid=27029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681669.230:4256682): pid=27029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681669.233:4256683): pid=27029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681669.233:4256684): pid=27029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681669.254:4256685): pid=27034 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681669.254:4256686): pid=27034 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674681669.254:4256687): pid=27034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681669.268:4256688): pid=27034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681669.273:4256689): pid=27034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681669.273:4256690): pid=27034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681669.692:4256691): pid=27040 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681669.692:4256692): pid=27040 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674681669.692:4256693): pid=27040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681669.706:4256694): pid=27040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681669.709:4256695): pid=27040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681669.710:4256696): pid=27040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681670.544:4256697): pid=27048 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681670.545:4256698): pid=27048 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674681670.545:4256699): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681670.559:4256700): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681670.562:4256701): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681670.562:4256702): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681670.584:4256703): pid=27053 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681670.584:4256704): pid=27053 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674681670.584:4256705): pid=27053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681670.598:4256706): pid=27053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681670.602:4256707): pid=27053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681670.602:4256708): pid=27053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681670.623:4256709): pid=27058 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681670.623:4256710): pid=27058 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674681670.624:4256711): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681670.637:4256712): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681670.640:4256713): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681670.640:4256714): pid=27058 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681670.665:4256715): pid=27061 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681670.666:4256716): pid=27061 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674681670.666:4256717): pid=27061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681670.680:4256718): pid=27061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681670.798:4256719): pid=27061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681670.798:4256720): pid=27061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681671.631:4256721): pid=27068 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681671.631:4256722): pid=27068 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674681671.631:4256723): pid=27068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681671.644:4256724): pid=27068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681671.698:4256725): pid=27068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681671.698:4256726): pid=27068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681671.726:4256727): pid=27074 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681671.726:4256728): pid=27074 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674681671.726:4256729): pid=27074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681671.739:4256730): pid=27074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681672.918:4256731): pid=27074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681672.918:4256732): pid=27074 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681673.122:4256733): pid=27087 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681673.122:4256734): pid=27087 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674681673.122:4256735): pid=27087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681673.137:4256736): pid=27087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681674.347:4256737): pid=27087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681674.347:4256738): pid=27087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681674.549:4256739): pid=27097 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681674.549:4256740): pid=27097 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7368616C696E696A616D65732F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674681674.549:4256741): pid=27097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681674.563:4256742): pid=27097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681676.245:4256743): pid=27097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681676.245:4256744): pid=27097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681676.486:4256745): pid=27110 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681676.486:4256746): pid=27110 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674681676.486:4256747): pid=27110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681676.499:4256748): pid=27110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681677.632:4256749): pid=27110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681677.632:4256750): pid=27110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681677.727:4256751): pid=27125 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681677.727:4256752): pid=27125 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674681677.728:4256753): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681677.746:4256754): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681678.143:4256755): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681678.144:4256756): pid=27125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681678.261:4256757): pid=27133 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681678.261:4256758): pid=27133 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674681678.261:4256759): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681678.276:4256760): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681680.443:4256761): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681680.443:4256762): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681680.700:4256763): pid=27152 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681680.700:4256764): pid=27152 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F55474F43524D2F75676F5F626C672026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F75676F7473636F6D2F7075626C69635F68746D6C2F6F6C642F55474F43524D2F75676F5F626C67202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674681680.701:4256765): pid=27152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681680.715:4256766): pid=27152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681681.848:4256767): pid=27152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681681.848:4256768): pid=27152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681682.051:4256769): pid=27162 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681682.052:4256770): pid=27162 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674681682.052:4256771): pid=27162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681682.065:4256772): pid=27162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681683.166:4256773): pid=27162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681683.166:4256774): pid=27162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681683.941:4256775): pid=27176 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674681683.941:4256776): pid=27176 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674681683.941:4256777): pid=27176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674681683.955:4256778): pid=27176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674681685.017:4256779): pid=27176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674681685.017:4256780): pid=27176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674681722.016:4256781): pid=27296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681722.017:4256782): pid=27296 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681722.019:4256783): pid=27296 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258593 res=1
type=USER_START msg=audit(1674681722.035:4256784): pid=27296 uid=0 auid=1055 ses=258593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681722.037:4256785): pid=27296 uid=0 auid=1055 ses=258593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681722.334:4256786): pid=27296 uid=0 auid=1055 ses=258593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681722.336:4256787): pid=27296 uid=0 auid=1055 ses=258593 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681781.352:4256788): pid=27481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681781.352:4256789): pid=27481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681781.352:4256790): pid=27481 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258594 res=1
type=USER_START msg=audit(1674681781.367:4256791): pid=27481 uid=0 auid=1055 ses=258594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681781.368:4256792): pid=27481 uid=0 auid=1055 ses=258594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681781.610:4256793): pid=27481 uid=0 auid=1055 ses=258594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681781.611:4256794): pid=27481 uid=0 auid=1055 ses=258594 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674681797.599:4256795): avc: denied { read } for pid=27567 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674681797.599:4256795): avc: denied { open } for pid=27567 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681797.599:4256795): arch=c000003e syscall=2 success=yes exit=18 a0=5561efee7f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=27567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681797.599:4256795): proctitle="dovecot/auth"
type=AVC msg=audit(1674681797.599:4256796): avc: denied { getattr } for pid=27567 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674681797.599:4256796): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe1bdc4630 a2=7ffe1bdc4630 a3=fffffc00 items=0 ppid=5547 pid=27567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681797.599:4256796): proctitle="dovecot/auth"
type=AVC msg=audit(1674681798.132:4256797): avc: denied { name_connect } for pid=27567 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674681798.132:4256797): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe1bdc4420 a2=10 a3=7ffe1bdc441c items=0 ppid=5547 pid=27567 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681798.132:4256797): proctitle="dovecot/auth"
type=AVC msg=audit(1674681798.171:4256798): avc: denied { write } for pid=27597 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674681798.171:4256798): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdfa5bb2e0 a2=6e a3=63d19dc6 items=0 ppid=5547 pid=27597 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681798.171:4256798): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674681822.092:4256799): pid=27738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681822.093:4256800): pid=27738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681822.093:4256801): pid=27738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27738 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681822.140:4256802): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27738 suid=74 rport=56928 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681822.141:4256803): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27738 suid=74 rport=56928 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=? res=success'
type=USER_AUTH msg=audit(1674681822.464:4256804): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.37.80.90 addr=103.37.80.90 terminal=ssh res=failed'
type=AVC msg=audit(1674681824.074:4256805): avc: denied { name_connect } for pid=27567 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674681824.074:4256805): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffe1bdc4420 a2=10 a3=7ffe1bdc441c items=0 ppid=5547 pid=27567 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681824.074:4256805): proctitle="dovecot/auth"
type=USER_AUTH msg=audit(1674681824.908:4256806): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681824.959:4256807): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27738 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681824.959:4256808): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27738 suid=74 rport=56928 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681824.961:4256809): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681824.961:4256810): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681824.961:4256811): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27737 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681824.961:4256812): pid=27737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681827.451:4256813): pid=27757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681827.451:4256814): pid=27757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681827.451:4256815): pid=27757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27757 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681827.489:4256816): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27757 suid=74 rport=44184 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681827.490:4256817): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27757 suid=74 rport=44184 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=? res=success'
type=USER_AUTH msg=audit(1674681827.766:4256818): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=13.76.164.123 addr=13.76.164.123 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681829.232:4256819): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681829.273:4256820): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27757 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681829.273:4256821): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27757 suid=74 rport=44184 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681829.274:4256822): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681829.274:4256823): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681829.274:4256824): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27756 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681829.274:4256825): pid=27756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674681841.629:4256826): pid=27799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681841.629:4256827): pid=27799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681841.631:4256828): pid=27799 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258595 res=1
type=USER_START msg=audit(1674681841.657:4256829): pid=27799 uid=0 auid=1055 ses=258595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681841.660:4256830): pid=27799 uid=0 auid=1055 ses=258595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681841.993:4256831): pid=27799 uid=0 auid=1055 ses=258595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681841.995:4256832): pid=27799 uid=0 auid=1055 ses=258595 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674681850.918:4256833): pid=27830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681850.918:4256834): pid=27830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681850.918:4256835): pid=27830 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27830 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681851.083:4256836): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=27830 suid=74 rport=57360 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681851.084:4256837): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=27830 suid=74 rport=57360 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674681852.012:4256838): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681854.576:4256839): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681857.746:4256840): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681859.663:4256841): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681862.831:4256842): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681864.100:4256843): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681867.267:4256844): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27830 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681867.268:4256845): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27830 suid=74 rport=57360 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681867.269:4256846): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681867.269:4256847): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681867.269:4256848): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27829 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681867.269:4256849): pid=27829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=AVC msg=audit(1674681898.516:4256850): avc: denied { write } for pid=27966 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674681898.516:4256850): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc53e1f660 a2=6e a3=63d19e2a items=0 ppid=5547 pid=27966 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681898.516:4256850): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674681902.018:4256851): pid=27991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674681902.018:4256852): pid=27990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681902.019:4256853): pid=27990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681902.019:4256854): pid=27991 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681902.019:4256855): pid=27990 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258596 res=1
type=LOGIN msg=audit(1674681902.020:4256856): pid=27991 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258597 res=1
type=USER_START msg=audit(1674681902.058:4256857): pid=27991 uid=0 auid=1055 ses=258597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674681902.059:4256858): pid=27990 uid=0 auid=0 ses=258596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681902.060:4256859): pid=27991 uid=0 auid=1055 ses=258597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681902.061:4256860): pid=27990 uid=0 auid=0 ses=258596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681902.404:4256861): pid=27991 uid=0 auid=1055 ses=258597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681902.409:4256862): pid=27991 uid=0 auid=1055 ses=258597 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674681903.659:4256863): pid=28013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681903.659:4256864): pid=28013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681903.659:4256865): pid=28013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681903.818:4256866): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28013 suid=74 rport=56060 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681903.818:4256867): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28013 suid=74 rport=56060 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=? res=success'
type=USER_AUTH msg=audit(1674681904.601:4256868): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=94.153.212.78 addr=94.153.212.78 terminal=ssh res=failed'
type=CRED_DISP msg=audit(1674681905.408:4256869): pid=27990 uid=0 auid=0 ses=258596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681905.412:4256870): pid=27990 uid=0 auid=0 ses=258596 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674681905.973:4256871): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681906.137:4256872): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28013 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681906.137:4256873): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28013 suid=74 rport=56060 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681906.139:4256874): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681906.139:4256875): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681906.139:4256876): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28012 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681906.139:4256877): pid=28012 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=94.153.212.78 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681906.507:4256878): pid=28025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681906.507:4256879): pid=28025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681906.507:4256880): pid=28025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28025 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681906.694:4256881): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28025 suid=74 rport=60762 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681906.694:4256882): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28025 suid=74 rport=60762 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=? res=success'
type=USER_AUTH msg=audit(1674681907.540:4256883): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.193.67.197 addr=185.193.67.197 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674681908.183:4256884): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674681908.183:4256884): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efe8026a010 items=0 ppid=28041 pid=28044 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681908.183:4256884): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674681908.189:4256885): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674681908.189:4256885): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f900e527010 items=0 ppid=28041 pid=28045 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681908.189:4256885): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674681908.192:4256886): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674681908.192:4256886): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f22c6045010 items=0 ppid=28041 pid=28046 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681908.192:4256886): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674681908.196:4256887): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674681908.196:4256887): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdca83f5010 items=0 ppid=28041 pid=28047 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681908.196:4256887): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674681908.493:4256888): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674681908.493:4256888): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5d1f0b0010 items=0 ppid=28041 pid=28056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681908.493:4256888): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730035392E3132362E3131302E313637002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681908.499:4256889): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674681908.499:4256889): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe7881f3010 items=0 ppid=28041 pid=28057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681908.499:4256889): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640035392E3132362E3131302E313637002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674681908.503:4256890): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674681908.503:4256890): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3d8ab3b010 items=0 ppid=28041 pid=28058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681908.503:4256890): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730039342E3135332E3231322E3738002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681908.509:4256891): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674681908.509:4256891): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f93f3619010 items=0 ppid=28041 pid=28059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681908.509:4256891): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640039342E3135332E3231322E3738002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674681909.321:4256892): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681909.516:4256893): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28025 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681909.516:4256894): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28025 suid=74 rport=60762 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681909.517:4256895): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681909.517:4256896): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681909.517:4256897): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28024 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681909.517:4256898): pid=28024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681912.372:4256899): pid=28077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681912.372:4256900): pid=28077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681912.372:4256901): pid=28077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28077 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681912.544:4256902): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28077 suid=74 rport=41116 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681912.544:4256903): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28077 suid=74 rport=41116 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=? res=success'
type=USER_AUTH msg=audit(1674681913.355:4256904): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=88.149.212.167 addr=88.149.212.167 terminal=ssh res=failed'
type=AVC msg=audit(1674681914.878:4256905): avc: denied { name_connect } for pid=27567 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674681914.878:4256905): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe1bdc4420 a2=10 a3=7ffe1bdc441c items=0 ppid=5547 pid=27567 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681914.878:4256905): proctitle="dovecot/auth"
type=USER_AUTH msg=audit(1674681915.629:4256906): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681915.872:4256907): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28077 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681915.872:4256908): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28077 suid=74 rport=41116 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681915.873:4256909): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681915.873:4256910): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681915.873:4256911): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28076 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681915.873:4256912): pid=28076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674681915.966:4256913): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674681915.966:4256913): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6a42ea5010 items=0 ppid=28090 pid=28095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681915.966:4256913): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003138332E3231342E39382E313338002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674681952.798:4256914): pid=28213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681952.798:4256915): pid=28213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681952.798:4256916): pid=28213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28213 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681953.016:4256917): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28213 suid=74 rport=60780 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.135.144.44 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681953.016:4256918): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28213 suid=74 rport=60780 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.135.144.44 terminal=? res=success'
type=USER_AUTH msg=audit(1674681953.997:4256919): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.135.144.44 addr=43.135.144.44 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681955.758:4256920): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.135.144.44 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681955.978:4256921): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28213 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681955.978:4256922): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28213 suid=74 rport=60780 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.135.144.44 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681955.980:4256923): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681955.980:4256924): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681955.980:4256925): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28212 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674681955.980:4256926): pid=28212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.135.144.44 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674681960.878:4256927): pid=28249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681960.878:4256928): pid=28249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674681960.878:4256929): pid=28249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28249 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681961.031:4256930): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=28249 suid=74 rport=58825 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.9.223.153 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674681961.032:4256931): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=28249 suid=74 rport=58825 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.9.223.153 terminal=? res=success'
type=USER_ACCT msg=audit(1674681961.431:4256932): pid=28250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674681961.431:4256933): pid=28250 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674681961.432:4256934): pid=28250 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258598 res=1
type=USER_START msg=audit(1674681961.451:4256935): pid=28250 uid=0 auid=1055 ses=258598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674681961.453:4256936): pid=28250 uid=0 auid=1055 ses=258598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674681961.734:4256937): pid=28250 uid=0 auid=1055 ses=258598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674681961.737:4256938): pid=28250 uid=0 auid=1055 ses=258598 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674681962.229:4256939): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.9.223.153 addr=188.9.223.153 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681964.226:4256940): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.9.223.153 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681964.938:4256941): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.9.223.153 addr=188.9.223.153 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681966.544:4256942): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.9.223.153 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681967.008:4256943): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.9.223.153 addr=188.9.223.153 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681969.361:4256944): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.9.223.153 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681970.775:4256945): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.9.223.153 addr=188.9.223.153 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681972.205:4256946): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.9.223.153 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674681972.602:4256947): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=188.9.223.153 addr=188.9.223.153 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674681973.614:4256948): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674681973.614:4256948): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0ad20c7010 items=0 ppid=28291 pid=28294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681973.614:4256948): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674681973.618:4256949): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674681973.618:4256949): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe8ab6ee010 items=0 ppid=28291 pid=28295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681973.618:4256949): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674681973.622:4256950): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674681973.622:4256950): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fedea3cd010 items=0 ppid=28291 pid=28296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681973.622:4256950): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674681973.626:4256951): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674681973.626:4256951): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f147a8ee010 items=0 ppid=28291 pid=28297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681973.626:4256951): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674681973.933:4256952): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674681973.933:4256952): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4e1dc83010 items=0 ppid=28291 pid=28306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681973.933:4256952): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131382E36392E36302E323134002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681973.939:4256953): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674681973.939:4256953): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2bb2132010 items=0 ppid=28291 pid=28307 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681973.939:4256953): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131382E36392E36302E323134002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674681973.945:4256954): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674681973.945:4256954): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbccd876010 items=0 ppid=28291 pid=28308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681973.945:4256954): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138382E392E3232332E313533002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674681973.950:4256955): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674681973.950:4256955): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fef9ed39010 items=0 ppid=28291 pid=28309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674681973.950:4256955): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138382E392E3232332E313533002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674681974.639:4256956): pid=28247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.9.223.153 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674682021.750:4256957): pid=28460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682021.751:4256958): pid=28460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682021.752:4256959): pid=28460 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258599 res=1
type=USER_START msg=audit(1674682021.765:4256960): pid=28460 uid=0 auid=1055 ses=258599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682021.766:4256961): pid=28460 uid=0 auid=1055 ses=258599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682022.000:4256962): pid=28460 uid=0 auid=1055 ses=258599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682022.002:4256963): pid=28460 uid=0 auid=1055 ses=258599 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682051.082:4256964): avc: denied { read } for pid=28561 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674682051.082:4256964): avc: denied { open } for pid=28561 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682051.082:4256964): arch=c000003e syscall=2 success=yes exit=18 a0=55ed283d8f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=28561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682051.082:4256964): proctitle="dovecot/auth"
type=AVC msg=audit(1674682051.083:4256965): avc: denied { getattr } for pid=28561 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682051.083:4256965): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffea21ae610 a2=7ffea21ae610 a3=fffffc00 items=0 ppid=5547 pid=28561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682051.083:4256965): proctitle="dovecot/auth"
type=AVC msg=audit(1674682052.492:4256966): avc: denied { name_connect } for pid=28561 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674682052.492:4256966): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffea21ae400 a2=10 a3=7ffea21ae3fc items=0 ppid=5547 pid=28561 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682052.492:4256966): proctitle="dovecot/auth"
type=AVC msg=audit(1674682052.519:4256967): avc: denied { write } for pid=28573 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674682052.519:4256967): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffd8ac2cb0 a2=6e a3=63d19ec4 items=0 ppid=5547 pid=28573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682052.519:4256967): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674682072.556:4256968): pid=28645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682072.556:4256969): pid=28645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682072.556:4256970): pid=28645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28645 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682072.593:4256971): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28645 suid=74 rport=35900 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682072.593:4256972): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28645 suid=74 rport=35900 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=? res=success'
type=USER_AUTH msg=audit(1674682072.873:4256973): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=13.76.164.123 addr=13.76.164.123 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674682074.639:4256974): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674682074.678:4256975): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28645 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682074.678:4256976): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28645 suid=74 rport=35900 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682074.680:4256977): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682074.680:4256978): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682074.680:4256979): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674682074.680:4256980): pid=28644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=13.76.164.123 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674682077.889:4256981): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682077.889:4256981): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f62866a3010 items=0 ppid=28668 pid=28671 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682077.889:4256981): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674682077.894:4256982): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682077.894:4256982): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdb0d5d5010 items=0 ppid=28668 pid=28672 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682077.894:4256982): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674682077.898:4256983): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674682077.898:4256983): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f44557e3010 items=0 ppid=28668 pid=28673 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682077.898:4256983): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674682077.903:4256984): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682077.903:4256984): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5cc3b6c010 items=0 ppid=28668 pid=28674 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682077.903:4256984): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674682078.204:4256985): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682078.204:4256985): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f096bc6c010 items=0 ppid=28668 pid=28685 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682078.204:4256985): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730034392E38382E3131322E313133002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682078.210:4256986): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682078.210:4256986): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f44483e7010 items=0 ppid=28668 pid=28686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682078.210:4256986): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640034392E38382E3131322E313133002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674682078.215:4256987): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674682078.215:4256987): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbfccadf010 items=0 ppid=28668 pid=28687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682078.215:4256987): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730031332E37362E3136342E313233002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682078.221:4256988): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682078.221:4256988): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fac80aba010 items=0 ppid=28668 pid=28688 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682078.221:4256988): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640031332E37362E3136342E313233002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674682081.017:4256989): pid=28703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682081.017:4256990): pid=28704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682081.017:4256991): pid=28703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682081.017:4256992): pid=28703 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258600 res=1
type=CRED_ACQ msg=audit(1674682081.017:4256993): pid=28704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682081.017:4256994): pid=28704 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258601 res=1
type=USER_START msg=audit(1674682081.054:4256995): pid=28704 uid=0 auid=1055 ses=258601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682081.055:4256996): pid=28703 uid=0 auid=0 ses=258600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682081.056:4256997): pid=28704 uid=0 auid=1055 ses=258601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682081.057:4256998): pid=28703 uid=0 auid=0 ses=258600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682081.123:4256999): pid=28703 uid=0 auid=0 ses=258600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682081.128:4257000): pid=28703 uid=0 auid=0 ses=258600 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682081.356:4257001): pid=28704 uid=0 auid=1055 ses=258601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682081.357:4257002): pid=28704 uid=0 auid=1055 ses=258601 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674682100.744:4257003): pid=28766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682100.744:4257004): pid=28766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682100.744:4257005): pid=28766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28766 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682100.957:4257006): pid=28765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28766 suid=74 rport=37542 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.135.144.44 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682100.957:4257007): pid=28765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28766 suid=74 rport=37542 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.135.144.44 terminal=? res=success'
type=USER_AUTH msg=audit(1674682101.940:4257008): pid=28765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.135.144.44 addr=43.135.144.44 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674682102.906:4257009): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682102.906:4257009): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efe5b700010 items=0 ppid=28777 pid=28780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682102.906:4257009): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674682102.911:4257010): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682102.911:4257010): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f91b578d010 items=0 ppid=28777 pid=28781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682102.911:4257010): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674682102.915:4257011): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674682102.915:4257011): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6c812a3010 items=0 ppid=28777 pid=28782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682102.915:4257011): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674682102.919:4257012): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682102.919:4257012): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3f78cbf010 items=0 ppid=28777 pid=28783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682102.919:4257012): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674682103.211:4257013): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682103.211:4257013): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8ca42bc010 items=0 ppid=28777 pid=28791 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682103.211:4257013): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730039322E3235352E38352E313135002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682103.373:4257014): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682103.373:4257014): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6155848010 items=0 ppid=28777 pid=28792 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682103.373:4257014): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640039322E3235352E38352E313135002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674682103.379:4257015): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674682103.379:4257015): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f93d5d6d010 items=0 ppid=28777 pid=28793 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682103.379:4257015): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034332E3133352E3134342E3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682103.397:4257016): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682103.397:4257016): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f76d6a53010 items=0 ppid=28777 pid=28794 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682103.397:4257016): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034332E3133352E3134342E3434002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674682104.345:4257017): avc: denied { name_connect } for pid=28561 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674682104.345:4257017): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffea21ae400 a2=10 a3=7ffea21ae3fc items=0 ppid=5547 pid=28561 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682104.345:4257017): proctitle="dovecot/auth"
type=USER_AUTH msg=audit(1674682104.354:4257018): pid=28765 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.135.144.44 terminal=ssh res=failed'
type=AVC msg=audit(1674682104.357:4257019): avc: denied { write } for pid=28573 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674682104.357:4257019): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffd8ac2cb0 a2=6e a3=63d19ef8 items=0 ppid=5547 pid=28573 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682104.357:4257019): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674682141.381:4257020): pid=29034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682141.382:4257021): pid=29034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682141.383:4257022): pid=29034 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258602 res=1
type=USER_START msg=audit(1674682141.404:4257023): pid=29034 uid=0 auid=1055 ses=258602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682141.406:4257024): pid=29034 uid=0 auid=1055 ses=258602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682141.678:4257025): pid=29034 uid=0 auid=1055 ses=258602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682141.680:4257026): pid=29034 uid=0 auid=1055 ses=258602 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674682149.047:4257027): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682149.048:4257028): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682149.048:4257029): pid=29063 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29063 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682149.091:4257030): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29063 suid=74 rport=47743 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682149.091:4257031): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29063 suid=74 rport=47743 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=? res=success'
type=USER_AUTH msg=audit(1674682149.399:4257032): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=103.37.80.90 addr=103.37.80.90 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674682152.066:4257033): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674682152.114:4257034): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29063 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682152.114:4257035): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29063 suid=74 rport=47743 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682152.116:4257036): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682152.116:4257037): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682152.116:4257038): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29062 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674682152.116:4257039): pid=29062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.37.80.90 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674682152.944:4257040): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682152.944:4257040): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb1cecd8010 items=0 ppid=29079 pid=29082 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682152.944:4257040): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674682152.948:4257041): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682152.948:4257041): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdc8f8b3010 items=0 ppid=29079 pid=29083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682152.948:4257041): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674682152.952:4257042): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674682152.952:4257042): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd34f0ac010 items=0 ppid=29079 pid=29084 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682152.952:4257042): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674682152.957:4257043): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682152.957:4257043): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4665ab9010 items=0 ppid=29079 pid=29085 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682152.957:4257043): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674682153.262:4257044): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682153.262:4257044): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9138f56010 items=0 ppid=29079 pid=29093 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682153.262:4257044): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138332E39392E3134332E3330002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682153.270:4257045): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682153.270:4257045): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcde1ef8010 items=0 ppid=29079 pid=29094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682153.270:4257045): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138332E39392E3134332E3330002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674682153.275:4257046): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674682153.275:4257046): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff924c4d010 items=0 ppid=29079 pid=29095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682153.275:4257046): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130332E33372E38302E3930002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682153.280:4257047): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682153.280:4257047): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0ddca39010 items=0 ppid=29079 pid=29096 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682153.280:4257047): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130332E33372E38302E3930002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674682169.371:4257048): pid=29167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682169.371:4257049): pid=29167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682169.371:4257050): pid=29167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29167 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682169.542:4257051): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29167 suid=74 rport=53086 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682169.542:4257052): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29167 suid=74 rport=53086 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=? res=success'
type=USER_AUTH msg=audit(1674682170.419:4257053): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=88.149.212.167 addr=88.149.212.167 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674682172.305:4257054): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674682172.479:4257055): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29167 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682172.480:4257056): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29167 suid=74 rport=53086 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682172.481:4257057): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682172.481:4257058): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682172.481:4257059): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29166 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674682172.481:4257060): pid=29166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=88.149.212.167 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674682172.964:4257061): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682172.964:4257061): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f049f275010 items=0 ppid=29183 pid=29187 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682172.964:4257061): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674682172.968:4257062): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682172.968:4257062): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fae473b2010 items=0 ppid=29183 pid=29188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682172.968:4257062): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674682172.972:4257063): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674682172.972:4257063): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f388c481010 items=0 ppid=29183 pid=29189 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682172.972:4257063): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674682172.976:4257064): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682172.976:4257064): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2497b9e010 items=0 ppid=29183 pid=29190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682172.976:4257064): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674682173.274:4257065): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682173.274:4257065): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fce5f903010 items=0 ppid=29183 pid=29199 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682173.274:4257065): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131342E33352E3130362E313030002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682173.282:4257066): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682173.282:4257066): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1a05cae010 items=0 ppid=29183 pid=29200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682173.282:4257066): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131342E33352E3130362E313030002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674682173.289:4257067): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674682173.289:4257067): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f071f31f010 items=0 ppid=29183 pid=29201 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682173.289:4257067): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038382E3134392E3231322E313637002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682173.296:4257068): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682173.296:4257068): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f247912c010 items=0 ppid=29183 pid=29202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682173.296:4257068): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038382E3134392E3231322E313637002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674682187.380:4257069): pid=29258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682187.380:4257070): pid=29258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682187.380:4257071): pid=29258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29258 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682187.692:4257072): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29258 suid=74 rport=60418 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682187.692:4257073): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=29258 suid=74 rport=60418 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=? res=success'
type=USER_AUTH msg=audit(1674682188.500:4257074): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=185.193.67.197 addr=185.193.67.197 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674682190.191:4257075): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674682190.387:4257076): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29258 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682190.387:4257077): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=29258 suid=74 rport=60418 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682190.389:4257078): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=29257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682190.389:4257079): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=29257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682190.389:4257080): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=29257 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674682190.389:4257081): pid=29257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=185.193.67.197 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674682192.937:4257082): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682192.937:4257082): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f13308a8010 items=0 ppid=29281 pid=29285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682192.937:4257082): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674682192.941:4257083): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682192.941:4257083): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f32444f0010 items=0 ppid=29281 pid=29286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682192.941:4257083): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674682192.945:4257084): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674682192.945:4257084): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3504cea010 items=0 ppid=29281 pid=29287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682192.945:4257084): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674682192.949:4257085): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674682192.949:4257085): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc69c750010 items=0 ppid=29281 pid=29288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682192.949:4257085): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674682193.236:4257086): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682193.236:4257086): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f109b601010 items=0 ppid=29281 pid=29296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682193.236:4257086): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131352E3134322E37362E313737002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682193.241:4257087): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682193.241:4257087): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0da24c3010 items=0 ppid=29281 pid=29297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682193.241:4257087): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131352E3134322E37362E313737002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674682193.246:4257088): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674682193.246:4257088): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa381729010 items=0 ppid=29281 pid=29298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682193.246:4257088): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138352E3139332E36372E313937002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674682193.251:4257089): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674682193.251:4257089): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f92bdd6d010 items=0 ppid=29281 pid=29299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682193.251:4257089): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138352E3139332E36372E313937002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674682201.701:4257090): pid=29336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682201.701:4257091): pid=29337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682201.701:4257092): pid=29336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682201.701:4257093): pid=29337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682201.703:4257094): pid=29336 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258603 res=1
type=LOGIN msg=audit(1674682201.703:4257095): pid=29337 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258604 res=1
type=USER_ACCT msg=audit(1674682201.707:4257096): pid=29338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682201.707:4257097): pid=29338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682201.707:4257098): pid=29338 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258605 res=1
type=USER_START msg=audit(1674682201.781:4257099): pid=29336 uid=0 auid=0 ses=258603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682201.782:4257100): pid=29338 uid=0 auid=1055 ses=258605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682201.783:4257101): pid=29337 uid=0 auid=0 ses=258604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682201.783:4257102): pid=29336 uid=0 auid=0 ses=258603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682201.786:4257103): pid=29338 uid=0 auid=1055 ses=258605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682201.787:4257104): pid=29337 uid=0 auid=0 ses=258604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682201.814:4257105): pid=29336 uid=0 auid=0 ses=258603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682201.819:4257106): pid=29336 uid=0 auid=0 ses=258603 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682202.147:4257107): pid=29338 uid=0 auid=1055 ses=258605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682202.150:4257108): pid=29338 uid=0 auid=1055 ses=258605 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682205.231:4257109): pid=29337 uid=0 auid=0 ses=258604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682205.234:4257110): pid=29337 uid=0 auid=0 ses=258604 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682227.376:4257111): avc: denied { name_connect } for pid=28561 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674682227.376:4257111): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffea21ae400 a2=10 a3=7ffea21ae3fc items=0 ppid=5547 pid=28561 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682227.376:4257111): proctitle="dovecot/auth"
type=AVC msg=audit(1674682227.707:4257112): avc: denied { write } for pid=29454 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674682227.707:4257112): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff25f33670 a2=6e a3=63d19f73 items=0 ppid=5547 pid=29454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682227.707:4257112): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674682228.957:4257113): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674682228.957:4257113): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b65b26a2010 items=0 ppid=29468 pid=29473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682228.957:4257113): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650032372E3135362E332E3834002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432313A
type=USER_ACCT msg=audit(1674682261.253:4257114): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682261.253:4257115): pid=29577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682261.255:4257116): pid=29577 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258606 res=1
type=USER_START msg=audit(1674682261.270:4257117): pid=29577 uid=0 auid=1055 ses=258606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682261.272:4257118): pid=29577 uid=0 auid=1055 ses=258606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682261.623:4257119): pid=29577 uid=0 auid=1055 ses=258606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682261.624:4257120): pid=29577 uid=0 auid=1055 ses=258606 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682321.641:4257121): pid=29768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682321.641:4257122): pid=29768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682321.641:4257123): pid=29768 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258607 res=1
type=USER_START msg=audit(1674682321.656:4257124): pid=29768 uid=0 auid=1055 ses=258607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682321.658:4257125): pid=29768 uid=0 auid=1055 ses=258607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682321.971:4257126): pid=29768 uid=0 auid=1055 ses=258607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682321.972:4257127): pid=29768 uid=0 auid=1055 ses=258607 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682381.987:4257128): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682381.987:4257129): pid=29961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682381.987:4257130): pid=29961 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258608 res=1
type=USER_START msg=audit(1674682381.996:4257131): pid=29961 uid=0 auid=1055 ses=258608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682381.998:4257132): pid=29961 uid=0 auid=1055 ses=258608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682382.256:4257133): pid=29961 uid=0 auid=1055 ses=258608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682382.257:4257134): pid=29961 uid=0 auid=1055 ses=258608 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682441.269:4257135): pid=30147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682441.269:4257136): pid=30147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682441.269:4257137): pid=30147 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258609 res=1
type=USER_START msg=audit(1674682441.279:4257138): pid=30147 uid=0 auid=1055 ses=258609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682441.281:4257139): pid=30147 uid=0 auid=1055 ses=258609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682441.520:4257140): pid=30147 uid=0 auid=1055 ses=258609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682441.522:4257141): pid=30147 uid=0 auid=1055 ses=258609 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682450.179:4257142): avc: denied { read } for pid=30235 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674682450.179:4257142): avc: denied { open } for pid=30235 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682450.179:4257142): arch=c000003e syscall=2 success=yes exit=18 a0=55f842992f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682450.179:4257142): proctitle="dovecot/auth"
type=AVC msg=audit(1674682450.180:4257143): avc: denied { getattr } for pid=30235 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682450.180:4257143): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd7867a490 a2=7ffd7867a490 a3=fffffc00 items=0 ppid=5547 pid=30235 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682450.180:4257143): proctitle="dovecot/auth"
type=AVC msg=audit(1674682450.688:4257144): avc: denied { name_connect } for pid=30235 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674682450.688:4257144): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd7867a280 a2=10 a3=7ffd7867a27c items=0 ppid=5547 pid=30235 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682450.688:4257144): proctitle="dovecot/auth"
type=AVC msg=audit(1674682450.716:4257145): avc: denied { write } for pid=30264 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674682450.716:4257145): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcc0e41450 a2=6e a3=63d1a052 items=0 ppid=5547 pid=30264 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682450.716:4257145): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674682501.539:4257146): pid=30467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682501.539:4257147): pid=30469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682501.539:4257148): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682501.539:4257149): pid=30469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682501.539:4257150): pid=30467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682501.539:4257151): pid=30468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682501.540:4257154): pid=30469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258612 res=1
type=LOGIN msg=audit(1674682501.540:4257152): pid=30467 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258610 res=1
type=LOGIN msg=audit(1674682501.540:4257153): pid=30468 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258611 res=1
type=USER_ACCT msg=audit(1674682501.543:4257155): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682501.544:4257156): pid=30470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682501.544:4257157): pid=30470 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258613 res=1
type=USER_START msg=audit(1674682501.597:4257158): pid=30469 uid=0 auid=0 ses=258612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682501.597:4257159): pid=30468 uid=0 auid=0 ses=258611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682501.598:4257160): pid=30470 uid=0 auid=1055 ses=258613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682501.599:4257161): pid=30470 uid=0 auid=1055 ses=258613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682501.599:4257162): pid=30467 uid=0 auid=0 ses=258610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682501.600:4257163): pid=30468 uid=0 auid=0 ses=258611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682501.600:4257164): pid=30467 uid=0 auid=0 ses=258610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682501.601:4257165): pid=30469 uid=0 auid=0 ses=258612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682501.696:4257166): pid=30469 uid=0 auid=0 ses=258612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682501.699:4257167): pid=30469 uid=0 auid=0 ses=258612 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682501.699:4257168): pid=30468 uid=0 auid=0 ses=258611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682501.705:4257169): pid=30468 uid=0 auid=0 ses=258611 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682501.885:4257170): pid=30470 uid=0 auid=1055 ses=258613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682501.887:4257171): pid=30470 uid=0 auid=1055 ses=258613 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682504.964:4257172): pid=30467 uid=0 auid=0 ses=258610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682504.967:4257173): pid=30467 uid=0 auid=0 ses=258610 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682527.906:4257174): avc: denied { name_connect } for pid=30235 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674682527.906:4257174): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd7867a280 a2=10 a3=7ffd7867a27c items=0 ppid=5547 pid=30235 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682527.906:4257174): proctitle="dovecot/auth"
type=AVC msg=audit(1674682527.942:4257175): avc: denied { write } for pid=30586 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674682527.942:4257175): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc1c1779b0 a2=6e a3=63d1a09f items=0 ppid=5547 pid=30586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682527.942:4257175): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674682528.432:4257176): avc: denied { read append } for pid=30588 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674682528.432:4257176): avc: denied { open } for pid=30588 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682528.432:4257176): arch=c000003e syscall=2 success=yes exit=8 a0=557d58fa6a60 a1=402 a2=7ffddae14d80 a3=7ffddae14820 items=0 ppid=5547 pid=30588 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682528.432:4257176): proctitle="dovecot/imap"
type=AVC msg=audit(1674682528.432:4257177): avc: denied { getattr } for pid=30588 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682528.432:4257177): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffddae14ce0 a2=7ffddae14ce0 a3=7ffddae14760 items=0 ppid=5547 pid=30588 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682528.432:4257177): proctitle="dovecot/imap"
type=AVC msg=audit(1674682528.432:4257178): avc: denied { write } for pid=30588 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682528.432:4257178): arch=c000003e syscall=2 success=yes exit=10 a0=557d58fab990 a1=2 a2=7ffddae14a80 a3=7ffddae14520 items=0 ppid=5547 pid=30588 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682528.432:4257178): proctitle="dovecot/imap"
type=AVC msg=audit(1674682528.432:4257179): avc: denied { lock } for pid=30588 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682528.432:4257179): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffddae14980 a3=63d1a0a0 items=0 ppid=5547 pid=30588 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682528.432:4257179): proctitle="dovecot/imap"
type=AVC msg=audit(1674682528.432:4257180): avc: denied { read } for pid=30588 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674682528.432:4257180): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=557d58fd4300 a2=90800 a3=0 items=0 ppid=5547 pid=30588 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682528.432:4257180): proctitle="dovecot/imap"
type=AVC msg=audit(1674682528.433:4257181): avc: denied { getattr } for pid=30588 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682528.433:4257181): arch=c000003e syscall=4 success=yes exit=0 a0=557d58f96a60 a1=7ffddae14d30 a2=7ffddae14d30 a3=6f632e6f72676173 items=0 ppid=5547 pid=30588 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682528.433:4257181): proctitle="dovecot/imap"
type=AVC msg=audit(1674682529.914:4257182): avc: denied { write } for pid=30594 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674682529.914:4257182): arch=c000003e syscall=21 success=yes exit=0 a0=55c36867c4c0 a1=2 a2=7b48 a3=7fffcee8b4e0 items=0 ppid=5547 pid=30594 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682529.914:4257182): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674682561.988:4257183): pid=30690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682561.988:4257184): pid=30690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682561.990:4257185): pid=30690 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258614 res=1
type=USER_START msg=audit(1674682562.008:4257186): pid=30690 uid=0 auid=1055 ses=258614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682562.010:4257187): pid=30690 uid=0 auid=1055 ses=258614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682562.250:4257188): pid=30690 uid=0 auid=1055 ses=258614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682562.252:4257189): pid=30690 uid=0 auid=1055 ses=258614 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682621.264:4257190): pid=30881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682621.264:4257191): pid=30881 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682621.265:4257192): pid=30881 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258615 res=1
type=USER_START msg=audit(1674682621.277:4257193): pid=30881 uid=0 auid=1055 ses=258615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682621.278:4257194): pid=30881 uid=0 auid=1055 ses=258615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682621.505:4257195): pid=30881 uid=0 auid=1055 ses=258615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682621.507:4257196): pid=30881 uid=0 auid=1055 ses=258615 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682654.015:4257197): avc: denied { read } for pid=30996 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674682654.015:4257197): avc: denied { open } for pid=30996 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682654.015:4257197): arch=c000003e syscall=2 success=yes exit=18 a0=564b87063f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682654.015:4257197): proctitle="dovecot/auth"
type=AVC msg=audit(1674682654.015:4257198): avc: denied { getattr } for pid=30996 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682654.015:4257198): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffae19c550 a2=7fffae19c550 a3=fffffc00 items=0 ppid=5547 pid=30996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682654.015:4257198): proctitle="dovecot/auth"
type=AVC msg=audit(1674682656.040:4257199): avc: denied { write } for pid=31004 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674682656.040:4257199): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb5eee000 a2=6e a3=63d1a120 items=0 ppid=5547 pid=31004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682656.040:4257199): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674682681.520:4257200): pid=31080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682681.521:4257201): pid=31080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682681.521:4257202): pid=31080 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258616 res=1
type=USER_START msg=audit(1674682681.534:4257203): pid=31080 uid=0 auid=1055 ses=258616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682681.535:4257204): pid=31080 uid=0 auid=1055 ses=258616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682681.806:4257205): pid=31080 uid=0 auid=1055 ses=258616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682681.808:4257206): pid=31080 uid=0 auid=1055 ses=258616 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682693.162:4257207): avc: denied { name_connect } for pid=30996 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674682693.162:4257207): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffae19c340 a2=10 a3=7fffae19c33c items=0 ppid=5547 pid=30996 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682693.162:4257207): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674682716.890:4257208): pid=31211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682716.891:4257209): pid=31211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682716.891:4257210): pid=31211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31211 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682717.003:4257211): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=31211 suid=74 rport=46441 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=126.28.12.129 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682717.003:4257212): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=31211 suid=74 rport=46441 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=126.28.12.129 terminal=? res=success'
type=USER_AUTH msg=audit(1674682717.944:4257213): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=126.28.12.129 addr=126.28.12.129 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674682719.591:4257214): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=126.28.12.129 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674682719.815:4257215): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31211 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682719.815:4257216): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31211 suid=74 rport=46441 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=126.28.12.129 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682719.816:4257217): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682719.816:4257218): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682719.816:4257219): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31207 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674682719.816:4257220): pid=31207 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=126.28.12.129 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674682741.824:4257221): pid=31280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682741.824:4257222): pid=31279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682741.824:4257223): pid=31280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682741.824:4257224): pid=31279 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682741.825:4257225): pid=31280 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258617 res=1
type=LOGIN msg=audit(1674682741.825:4257226): pid=31279 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258618 res=1
type=USER_START msg=audit(1674682741.883:4257227): pid=31280 uid=0 auid=1055 ses=258617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682741.889:4257228): pid=31279 uid=0 auid=0 ses=258618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682741.889:4257229): pid=31280 uid=0 auid=1055 ses=258617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682741.890:4257230): pid=31279 uid=0 auid=0 ses=258618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682742.227:4257231): pid=31280 uid=0 auid=1055 ses=258617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682742.229:4257232): pid=31280 uid=0 auid=1055 ses=258617 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682743.042:4257233): pid=31279 uid=0 auid=0 ses=258618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682743.043:4257234): pid=31279 uid=0 auid=0 ses=258618 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682788.139:4257235): avc: denied { write } for pid=31004 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674682788.139:4257235): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdb5eee000 a2=6e a3=63d1a1a4 items=0 ppid=5547 pid=31004 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682788.139:4257235): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674682801.060:4257236): pid=31574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682801.061:4257237): pid=31574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682801.061:4257238): pid=31576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682801.061:4257239): pid=31575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682801.061:4257240): pid=31576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682801.061:4257241): pid=31575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682801.062:4257242): pid=31576 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258619 res=1
type=LOGIN msg=audit(1674682801.062:4257243): pid=31575 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258620 res=1
type=LOGIN msg=audit(1674682801.062:4257244): pid=31574 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258621 res=1
type=USER_START msg=audit(1674682801.105:4257246): pid=31576 uid=0 auid=1055 ses=258619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682801.105:4257245): pid=31575 uid=0 auid=0 ses=258620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682801.106:4257247): pid=31574 uid=0 auid=0 ses=258621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682801.107:4257248): pid=31574 uid=0 auid=0 ses=258621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682801.107:4257249): pid=31575 uid=0 auid=0 ses=258620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682801.108:4257250): pid=31576 uid=0 auid=1055 ses=258619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682801.132:4257251): pid=31574 uid=0 auid=0 ses=258621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682801.136:4257252): pid=31574 uid=0 auid=0 ses=258621 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682801.350:4257253): pid=31576 uid=0 auid=1055 ses=258619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682801.353:4257254): pid=31576 uid=0 auid=1055 ses=258619 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682802.999:4257255): avc: denied { name_connect } for pid=30996 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674682802.999:4257255): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7fffae19c340 a2=10 a3=7fffae19c33c items=0 ppid=5547 pid=30996 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682802.999:4257255): proctitle="dovecot/auth"
type=CRED_DISP msg=audit(1674682804.416:4257256): pid=31575 uid=0 auid=0 ses=258620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682804.418:4257257): pid=31575 uid=0 auid=0 ses=258620 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674682858.226:4257258): pid=31771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682858.227:4257259): pid=31771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682858.227:4257260): pid=31771 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31771 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682858.359:4257261): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31771 suid=74 rport=17998 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682858.359:4257262): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=31771 suid=74 rport=17998 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=USER_AUTH msg=audit(1674682859.120:4257263): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=195.226.194.242 addr=195.226.194.242 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674682860.927:4257264): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674682861.062:4257265): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31771 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682861.062:4257266): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31771 suid=74 rport=17998 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682861.064:4257267): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682861.064:4257268): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682861.064:4257269): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674682861.064:4257270): pid=31770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674682861.439:4257271): pid=31779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682861.440:4257272): pid=31779 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682861.441:4257273): pid=31779 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258622 res=1
type=USER_START msg=audit(1674682861.471:4257274): pid=31779 uid=0 auid=1055 ses=258622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682861.473:4257275): pid=31779 uid=0 auid=1055 ses=258622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682861.839:4257276): pid=31779 uid=0 auid=1055 ses=258622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682861.841:4257277): pid=31779 uid=0 auid=1055 ses=258622 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674682878.865:4257278): pid=31836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682878.865:4257279): pid=31836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682878.865:4257280): pid=31836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31836 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682879.045:4257281): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=31836 suid=74 rport=45859 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682879.045:4257282): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group1-sha1 spid=31836 suid=74 rport=45859 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=USER_AUTH msg=audit(1674682881.144:4257283): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=47.91.73.93 addr=47.91.73.93 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674682882.971:4257284): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674682883.224:4257285): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31836 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682883.224:4257286): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=31836 suid=74 rport=45859 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682883.226:4257287): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682883.226:4257288): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682883.226:4257289): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31835 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674682883.226:4257290): pid=31835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=47.91.73.93 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674682917.832:4257291): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682917.832:4257292): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682917.832:4257293): pid=31970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31970 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682918.074:4257294): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=31970 suid=74 rport=40511 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.229.168.111 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674682918.074:4257295): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=31970 suid=74 rport=40511 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=125.229.168.111 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682918.335:4257296): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31970 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682918.335:4257297): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=31968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682918.335:4257298): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=31968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674682918.335:4257299): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=31968 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674682918.335:4257300): pid=31968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=125.229.168.111 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674682921.855:4257301): pid=31983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682921.856:4257302): pid=31983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682921.856:4257303): pid=31983 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258623 res=1
type=USER_START msg=audit(1674682921.872:4257304): pid=31983 uid=0 auid=1055 ses=258623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682921.874:4257305): pid=31983 uid=0 auid=1055 ses=258623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682922.119:4257306): pid=31983 uid=0 auid=1055 ses=258623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682922.122:4257307): pid=31983 uid=0 auid=1055 ses=258623 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682935.263:4257308): avc: denied { read } for pid=32026 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674682935.263:4257308): avc: denied { open } for pid=32026 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682935.263:4257308): arch=c000003e syscall=2 success=yes exit=18 a0=55967b812f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=32026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682935.263:4257308): proctitle="dovecot/auth"
type=AVC msg=audit(1674682935.263:4257309): avc: denied { getattr } for pid=32026 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674682935.263:4257309): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe8929c150 a2=7ffe8929c150 a3=fffffc00 items=0 ppid=5547 pid=32026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682935.263:4257309): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674682981.138:4257310): pid=32186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674682981.138:4257311): pid=32185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682981.139:4257312): pid=32186 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674682981.139:4257313): pid=32185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674682981.140:4257314): pid=32185 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258624 res=1
type=LOGIN msg=audit(1674682981.140:4257315): pid=32186 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258625 res=1
type=USER_START msg=audit(1674682981.166:4257316): pid=32186 uid=0 auid=1055 ses=258625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674682981.167:4257317): pid=32185 uid=0 auid=0 ses=258624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682981.168:4257318): pid=32186 uid=0 auid=1055 ses=258625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674682981.169:4257319): pid=32185 uid=0 auid=0 ses=258624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682981.212:4257320): pid=32185 uid=0 auid=0 ses=258624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682981.215:4257321): pid=32185 uid=0 auid=0 ses=258624 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674682981.453:4257322): pid=32186 uid=0 auid=1055 ses=258625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674682981.455:4257323): pid=32186 uid=0 auid=1055 ses=258625 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674682994.916:4257324): avc: denied { name_connect } for pid=32026 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674682994.916:4257324): arch=c000003e syscall=42 success=no exit=-115 a0=17 a1=7ffe8929bf40 a2=10 a3=7ffe8929bf3c items=0 ppid=5547 pid=32026 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682994.916:4257324): proctitle="dovecot/auth"
type=AVC msg=audit(1674682994.946:4257325): avc: denied { write } for pid=32234 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674682994.946:4257325): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd08340f40 a2=6e a3=63d1a272 items=0 ppid=5547 pid=32234 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674682994.946:4257325): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674683041.471:4257326): pid=32387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683041.471:4257327): pid=32387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683041.471:4257328): pid=32387 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258626 res=1
type=USER_START msg=audit(1674683041.485:4257329): pid=32387 uid=0 auid=1055 ses=258626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683041.486:4257330): pid=32387 uid=0 auid=1055 ses=258626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683041.713:4257331): pid=32387 uid=0 auid=1055 ses=258626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683041.715:4257332): pid=32387 uid=0 auid=1055 ses=258626 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674683076.483:4257333): pid=32509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683076.484:4257334): pid=32509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683076.484:4257335): pid=32509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32509 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683076.757:4257336): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=32509 suid=74 rport=53387 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=24.179.32.243 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683076.757:4257337): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=32509 suid=74 rport=53387 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=24.179.32.243 terminal=? res=success'
type=USER_AUTH msg=audit(1674683078.115:4257338): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=24.179.32.243 addr=24.179.32.243 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674683079.651:4257339): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=24.179.32.243 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674683079.949:4257340): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32509 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683079.949:4257341): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32509 suid=74 rport=53387 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=24.179.32.243 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683079.951:4257342): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683079.951:4257343): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683079.951:4257344): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32504 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674683079.951:4257345): pid=32504 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=24.179.32.243 terminal=ssh res=failed'
type=AVC msg=audit(1674683088.010:4257346): avc: denied { read } for pid=32556 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674683088.010:4257346): avc: denied { open } for pid=32556 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683088.010:4257346): arch=c000003e syscall=2 success=yes exit=18 a0=562ed5fc5f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=32556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683088.010:4257346): proctitle="dovecot/auth"
type=AVC msg=audit(1674683088.010:4257347): avc: denied { getattr } for pid=32556 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683088.010:4257347): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe59545eb0 a2=7ffe59545eb0 a3=fffffc00 items=0 ppid=5547 pid=32556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683088.010:4257347): proctitle="dovecot/auth"
type=AVC msg=audit(1674683088.540:4257348): avc: denied { name_connect } for pid=32556 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674683088.540:4257348): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe59545ca0 a2=10 a3=7ffe59545c9c items=0 ppid=5547 pid=32556 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683088.540:4257348): proctitle="dovecot/auth"
type=AVC msg=audit(1674683088.568:4257349): avc: denied { write } for pid=32587 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674683088.568:4257349): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe87f21e90 a2=6e a3=63d1a2d0 items=0 ppid=5547 pid=32587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683088.568:4257349): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674683101.733:4257350): pid=32677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674683101.733:4257351): pid=32676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683101.734:4257352): pid=32677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683101.734:4257353): pid=32676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683101.735:4257354): pid=32677 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258627 res=1
type=LOGIN msg=audit(1674683101.735:4257355): pid=32676 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258628 res=1
type=USER_START msg=audit(1674683101.779:4257356): pid=32677 uid=0 auid=1055 ses=258627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674683101.779:4257357): pid=32676 uid=0 auid=0 ses=258628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683101.781:4257358): pid=32677 uid=0 auid=1055 ses=258627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683101.783:4257359): pid=32676 uid=0 auid=0 ses=258628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683102.130:4257360): pid=32677 uid=0 auid=1055 ses=258627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683102.135:4257361): pid=32677 uid=0 auid=1055 ses=258627 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674683102.336:4257362): avc: denied { write } for pid=32587 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674683102.336:4257362): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe87f21e90 a2=6e a3=63d1a2de items=0 ppid=5547 pid=32587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683102.336:4257362): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674683105.181:4257363): pid=32676 uid=0 auid=0 ses=258628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683105.183:4257364): pid=32676 uid=0 auid=0 ses=258628 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674683157.757:4257365): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683157.758:4257366): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683157.758:4257367): pid=411 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=411 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683158.032:4257368): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=411 suid=74 rport=47214 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683158.032:4257369): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=411 suid=74 rport=47214 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=USER_AUTH msg=audit(1674683159.123:4257370): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=81.161.229.135 addr=81.161.229.135 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674683161.203:4257371): pid=435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683161.203:4257372): pid=435 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683161.205:4257373): pid=435 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258629 res=1
type=USER_START msg=audit(1674683161.223:4257374): pid=435 uid=0 auid=1055 ses=258629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683161.226:4257375): pid=435 uid=0 auid=1055 ses=258629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683161.523:4257376): pid=435 uid=0 auid=1055 ses=258629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683161.527:4257377): pid=435 uid=0 auid=1055 ses=258629 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_AUTH msg=audit(1674683161.784:4257378): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674683161.987:4257379): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=411 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683161.987:4257380): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=411 suid=74 rport=47214 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683161.989:4257381): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683161.989:4257382): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683161.989:4257383): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674683161.989:4257384): pid=410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=81.161.229.135 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674683221.540:4257385): pid=635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683221.540:4257386): pid=635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683221.540:4257387): pid=635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258630 res=1
type=USER_START msg=audit(1674683221.552:4257388): pid=635 uid=0 auid=1055 ses=258630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683221.553:4257389): pid=635 uid=0 auid=1055 ses=258630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683221.789:4257390): pid=635 uid=0 auid=1055 ses=258630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683221.791:4257391): pid=635 uid=0 auid=1055 ses=258630 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674683281.803:4257392): pid=853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683281.803:4257393): pid=853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683281.803:4257394): pid=853 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258631 res=1
type=USER_START msg=audit(1674683281.815:4257395): pid=853 uid=0 auid=1055 ses=258631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683281.817:4257396): pid=853 uid=0 auid=1055 ses=258631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683282.063:4257397): pid=853 uid=0 auid=1055 ses=258631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683282.065:4257398): pid=853 uid=0 auid=1055 ses=258631 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674683333.559:4257399): pid=1015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683333.559:4257400): pid=1015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683333.559:4257401): pid=1015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683334.528:4257402): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1015 suid=74 rport=44172 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683334.528:4257403): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1015 suid=74 rport=44172 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674683335.366:4257404): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674683336.852:4257405): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674683337.174:4257406): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1015 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683337.174:4257407): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1015 suid=74 rport=44172 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683337.175:4257408): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683337.175:4257409): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683337.175:4257410): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1010 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674683337.175:4257411): pid=1010 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674683341.078:4257412): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683341.078:4257413): pid=1041 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683341.078:4257414): pid=1041 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258632 res=1
type=USER_START msg=audit(1674683341.094:4257415): pid=1041 uid=0 auid=1055 ses=258632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683341.095:4257416): pid=1041 uid=0 auid=1055 ses=258632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683341.357:4257417): pid=1041 uid=0 auid=1055 ses=258632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683341.359:4257418): pid=1041 uid=0 auid=1055 ses=258632 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674683401.375:4257419): pid=1222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674683401.376:4257420): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683401.376:4257421): pid=1222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683401.376:4257422): pid=1221 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683401.376:4257423): pid=1222 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258633 res=1
type=LOGIN msg=audit(1674683401.376:4257424): pid=1221 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258634 res=1
type=USER_ACCT msg=audit(1674683401.377:4257425): pid=1223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683401.377:4257426): pid=1223 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683401.377:4257427): pid=1223 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258635 res=1
type=USER_ACCT msg=audit(1674683401.377:4257428): pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683401.378:4257429): pid=1224 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683401.378:4257430): pid=1224 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258636 res=1
type=USER_START msg=audit(1674683401.436:4257431): pid=1222 uid=0 auid=0 ses=258633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674683401.436:4257432): pid=1223 uid=0 auid=0 ses=258635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674683401.437:4257433): pid=1224 uid=0 auid=1055 ses=258636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674683401.437:4257434): pid=1221 uid=0 auid=0 ses=258634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683401.438:4257435): pid=1224 uid=0 auid=1055 ses=258636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683401.438:4257436): pid=1223 uid=0 auid=0 ses=258635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683401.438:4257437): pid=1222 uid=0 auid=0 ses=258633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683401.439:4257438): pid=1221 uid=0 auid=0 ses=258634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683401.474:4257439): pid=1221 uid=0 auid=0 ses=258634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683401.478:4257440): pid=1221 uid=0 auid=0 ses=258634 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683401.552:4257441): pid=1223 uid=0 auid=0 ses=258635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683401.554:4257442): pid=1223 uid=0 auid=0 ses=258635 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683401.790:4257443): pid=1224 uid=0 auid=1055 ses=258636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683401.793:4257444): pid=1224 uid=0 auid=1055 ses=258636 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683404.809:4257445): pid=1222 uid=0 auid=0 ses=258633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683404.811:4257446): pid=1222 uid=0 auid=0 ses=258633 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674683458.824:4257447): avc: denied { read } for pid=1453 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674683458.824:4257447): avc: denied { open } for pid=1453 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683458.824:4257447): arch=c000003e syscall=2 success=yes exit=18 a0=5570e4c33f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683458.824:4257447): proctitle="dovecot/auth"
type=AVC msg=audit(1674683458.824:4257448): avc: denied { getattr } for pid=1453 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683458.824:4257448): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc0bea62b0 a2=7ffc0bea62b0 a3=fffffc00 items=0 ppid=5547 pid=1453 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683458.824:4257448): proctitle="dovecot/auth"
type=AVC msg=audit(1674683459.328:4257449): avc: denied { name_connect } for pid=1453 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674683459.328:4257449): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc0bea60a0 a2=10 a3=7ffc0bea609c items=0 ppid=5547 pid=1453 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683459.328:4257449): proctitle="dovecot/auth"
type=AVC msg=audit(1674683459.365:4257450): avc: denied { write } for pid=1481 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674683459.365:4257450): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffdbb1806f0 a2=6e a3=63d1a443 items=0 ppid=5547 pid=1481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683459.365:4257450): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674683461.830:4257451): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683461.830:4257452): pid=1514 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683461.831:4257453): pid=1514 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258637 res=1
type=USER_START msg=audit(1674683461.852:4257454): pid=1514 uid=0 auid=1055 ses=258637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683461.854:4257455): pid=1514 uid=0 auid=1055 ses=258637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683462.147:4257456): pid=1514 uid=0 auid=1055 ses=258637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683462.148:4257457): pid=1514 uid=0 auid=1055 ses=258637 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674683503.879:4257458): pid=1696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683503.879:4257459): pid=1696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683503.879:4257460): pid=1696 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1696 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683504.103:4257461): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=1696 suid=74 rport=51909 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.245.150.151 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683504.103:4257462): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=1696 suid=74 rport=51909 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.245.150.151 terminal=? res=success'
type=USER_AUTH msg=audit(1674683506.899:4257463): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=106.245.150.151 addr=106.245.150.151 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674683509.192:4257464): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=106.245.150.151 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674683510.072:4257465): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1696 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683510.072:4257466): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1696 suid=74 rport=51909 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.245.150.151 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683510.073:4257467): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683510.073:4257468): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683510.073:4257469): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1695 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674683510.073:4257470): pid=1695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=106.245.150.151 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674683521.163:4257471): pid=1742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683521.164:4257472): pid=1742 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683521.164:4257473): pid=1742 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258638 res=1
type=USER_START msg=audit(1674683521.178:4257474): pid=1742 uid=0 auid=1055 ses=258638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683521.180:4257475): pid=1742 uid=0 auid=1055 ses=258638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683521.407:4257476): pid=1742 uid=0 auid=1055 ses=258638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683521.410:4257477): pid=1742 uid=0 auid=1055 ses=258638 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674683581.269:4257478): avc: denied { name_connect } for pid=1453 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674683581.269:4257478): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc0bea60a0 a2=10 a3=7ffc0bea609c items=0 ppid=5547 pid=1453 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683581.269:4257478): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674683581.424:4257479): pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683581.424:4257480): pid=1951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683581.425:4257481): pid=1951 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258639 res=1
type=USER_START msg=audit(1674683581.436:4257482): pid=1951 uid=0 auid=1055 ses=258639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683581.438:4257483): pid=1951 uid=0 auid=1055 ses=258639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683581.662:4257484): pid=1951 uid=0 auid=1055 ses=258639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683581.663:4257485): pid=1951 uid=0 auid=1055 ses=258639 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674683582.368:4257486): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674683582.368:4257486): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b8d6ca11010 items=0 ppid=1962 pid=1969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683582.368:4257486): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E33342E3137362E3832002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543231
type=AVC msg=audit(1674683602.790:4257487): avc: denied { write } for pid=2027 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674683602.790:4257487): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc53032660 a2=6e a3=63d1a4d2 items=0 ppid=5547 pid=2027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683602.790:4257487): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674683625.386:4257488): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2115 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683625.386:4257489): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2115 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683625.387:4257490): pid=2115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2115 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683625.639:4257491): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=2115 suid=74 rport=60843 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.205.155.135 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683625.639:4257492): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=2115 suid=74 rport=60843 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.205.155.135 terminal=? res=success'
type=USER_AUTH msg=audit(1674683626.815:4257493): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=175.205.155.135 addr=175.205.155.135 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674683628.917:4257494): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=175.205.155.135 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674683629.174:4257495): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2115 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683629.174:4257496): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2115 suid=74 rport=60843 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=175.205.155.135 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683629.176:4257497): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683629.176:4257498): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683629.176:4257499): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2114 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674683629.176:4257500): pid=2114 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=175.205.155.135 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674683641.680:4257501): pid=2193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683641.680:4257502): pid=2193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683641.682:4257503): pid=2193 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258640 res=1
type=USER_START msg=audit(1674683641.701:4257504): pid=2193 uid=0 auid=1055 ses=258640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683641.703:4257505): pid=2193 uid=0 auid=1055 ses=258640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683641.994:4257506): pid=2193 uid=0 auid=1055 ses=258640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683641.995:4257507): pid=2193 uid=0 auid=1055 ses=258640 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674683667.769:4257508): avc: denied { read } for pid=2287 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674683667.769:4257508): avc: denied { open } for pid=2287 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683667.769:4257508): arch=c000003e syscall=2 success=yes exit=18 a0=55654a4e8f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683667.769:4257508): proctitle="dovecot/auth"
type=AVC msg=audit(1674683667.769:4257509): avc: denied { getattr } for pid=2287 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683667.769:4257509): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe27a7b120 a2=7ffe27a7b120 a3=fffffc00 items=0 ppid=5547 pid=2287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683667.769:4257509): proctitle="dovecot/auth"
type=AVC msg=audit(1674683670.061:4257510): avc: denied { write } for pid=2297 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674683670.061:4257510): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd0a97b990 a2=6e a3=63d1a516 items=0 ppid=5547 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683670.061:4257510): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674683670.564:4257511): avc: denied { read append } for pid=2299 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674683670.564:4257511): avc: denied { open } for pid=2299 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683670.564:4257511): arch=c000003e syscall=2 success=yes exit=8 a0=5612018c2a60 a1=402 a2=7fff5866b920 a3=7fff5866b3a0 items=0 ppid=5547 pid=2299 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683670.564:4257511): proctitle="dovecot/imap"
type=AVC msg=audit(1674683670.564:4257512): avc: denied { getattr } for pid=2299 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683670.564:4257512): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff5866b880 a2=7fff5866b880 a3=7fff5866b2e0 items=0 ppid=5547 pid=2299 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683670.564:4257512): proctitle="dovecot/imap"
type=AVC msg=audit(1674683670.564:4257513): avc: denied { write } for pid=2299 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683670.564:4257513): arch=c000003e syscall=2 success=yes exit=10 a0=5612018c7960 a1=2 a2=7fff5866b620 a3=7fff5866b0e0 items=0 ppid=5547 pid=2299 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683670.564:4257513): proctitle="dovecot/imap"
type=AVC msg=audit(1674683670.565:4257514): avc: denied { lock } for pid=2299 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683670.565:4257514): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff5866b520 a3=63d1a516 items=0 ppid=5547 pid=2299 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683670.565:4257514): proctitle="dovecot/imap"
type=AVC msg=audit(1674683670.565:4257515): avc: denied { read } for pid=2299 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674683670.565:4257515): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5612018f02f8 a2=90800 a3=0 items=0 ppid=5547 pid=2299 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683670.565:4257515): proctitle="dovecot/imap"
type=AVC msg=audit(1674683670.565:4257516): avc: denied { getattr } for pid=2299 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674683670.565:4257516): arch=c000003e syscall=4 success=yes exit=0 a0=5612018b2a60 a1=7fff5866b8d0 a2=7fff5866b8d0 a3=6f632e6f72676173 items=0 ppid=5547 pid=2299 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683670.565:4257516): proctitle="dovecot/imap"
type=AVC msg=audit(1674683672.449:4257517): avc: denied { write } for pid=2304 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674683672.449:4257517): arch=c000003e syscall=21 success=yes exit=0 a0=55d0acaf84c0 a1=2 a2=7b48 a3=7fffb26851e0 items=0 ppid=5547 pid=2304 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683672.449:4257517): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674683702.021:4257518): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683702.021:4257519): pid=2396 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683702.021:4257520): pid=2396 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258641 res=1
type=USER_ACCT msg=audit(1674683702.052:4257521): pid=2395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683702.052:4257522): pid=2395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683702.052:4257523): pid=2395 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258642 res=1
type=USER_START msg=audit(1674683702.084:4257524): pid=2396 uid=0 auid=1055 ses=258641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674683702.085:4257525): pid=2395 uid=0 auid=0 ses=258642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683702.087:4257526): pid=2396 uid=0 auid=1055 ses=258641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683702.087:4257527): pid=2395 uid=0 auid=0 ses=258642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683702.381:4257528): pid=2396 uid=0 auid=1055 ses=258641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683702.384:4257529): pid=2396 uid=0 auid=1055 ses=258641 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683705.454:4257530): pid=2395 uid=0 auid=0 ses=258642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683705.456:4257531): pid=2395 uid=0 auid=0 ses=258642 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674683760.190:4257532): avc: denied { name_connect } for pid=2287 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674683760.190:4257532): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe27a7af10 a2=10 a3=7ffe27a7af0c items=0 ppid=5547 pid=2287 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683760.190:4257532): proctitle="dovecot/auth"
type=AVC msg=audit(1674683760.223:4257533): avc: denied { write } for pid=2647 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674683760.223:4257533): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd0f752930 a2=6e a3=63d1a570 items=0 ppid=5547 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674683760.223:4257533): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674683761.478:4257534): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683761.478:4257535): pid=2664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683761.480:4257536): pid=2664 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258643 res=1
type=USER_START msg=audit(1674683761.500:4257537): pid=2664 uid=0 auid=1055 ses=258643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683761.502:4257538): pid=2664 uid=0 auid=1055 ses=258643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683761.818:4257539): pid=2664 uid=0 auid=1055 ses=258643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683761.820:4257540): pid=2664 uid=0 auid=1055 ses=258643 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674683807.845:4257541): pid=2857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683807.845:4257542): pid=2857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683807.845:4257543): pid=2857 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2857 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683807.980:4257544): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=2857 suid=74 rport=43432 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=90.103.155.9 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674683807.980:4257545): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=2857 suid=74 rport=43432 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=90.103.155.9 terminal=? res=success'
type=USER_AUTH msg=audit(1674683811.006:4257546): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=90.103.155.9 addr=90.103.155.9 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674683812.507:4257547): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=90.103.155.9 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674683812.655:4257548): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2857 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683812.655:4257549): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2857 suid=74 rport=43432 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=90.103.155.9 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683812.656:4257550): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683812.656:4257551): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674683812.656:4257552): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2856 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674683812.657:4257553): pid=2856 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=90.103.155.9 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674683821.841:4257554): pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683821.841:4257555): pid=2896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683821.843:4257556): pid=2896 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258644 res=1
type=USER_START msg=audit(1674683821.859:4257557): pid=2896 uid=0 auid=1055 ses=258644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683821.860:4257558): pid=2896 uid=0 auid=1055 ses=258644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683822.126:4257559): pid=2896 uid=0 auid=1055 ses=258644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683822.127:4257560): pid=2896 uid=0 auid=1055 ses=258644 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674683881.140:4257561): pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674683881.140:4257562): pid=3087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683881.141:4257563): pid=3086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683881.141:4257564): pid=3087 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683881.141:4257565): pid=3086 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258645 res=1
type=LOGIN msg=audit(1674683881.141:4257566): pid=3087 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258646 res=1
type=USER_START msg=audit(1674683881.169:4257567): pid=3086 uid=0 auid=0 ses=258645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674683881.170:4257568): pid=3087 uid=0 auid=1055 ses=258646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683881.171:4257569): pid=3087 uid=0 auid=1055 ses=258646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683881.171:4257570): pid=3086 uid=0 auid=0 ses=258645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683881.235:4257571): pid=3086 uid=0 auid=0 ses=258645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683881.238:4257572): pid=3086 uid=0 auid=0 ses=258645 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683881.426:4257573): pid=3087 uid=0 auid=1055 ses=258646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683881.427:4257574): pid=3087 uid=0 auid=1055 ses=258646 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674683941.439:4257575): pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674683941.439:4257576): pid=3286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674683941.440:4257577): pid=3286 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258647 res=1
type=USER_START msg=audit(1674683941.455:4257578): pid=3286 uid=0 auid=1055 ses=258647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674683941.456:4257579): pid=3286 uid=0 auid=1055 ses=258647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674683941.702:4257580): pid=3286 uid=0 auid=1055 ses=258647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674683941.704:4257581): pid=3286 uid=0 auid=1055 ses=258647 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684001.716:4257582): pid=3486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684001.716:4257583): pid=3489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684001.717:4257584): pid=3486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684001.717:4257585): pid=3489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684001.717:4257586): pid=3486 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258648 res=1
type=LOGIN msg=audit(1674684001.717:4257587): pid=3489 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258649 res=1
type=USER_ACCT msg=audit(1674684001.718:4257588): pid=3488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684001.719:4257589): pid=3488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684001.719:4257590): pid=3487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684001.719:4257591): pid=3487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684001.719:4257592): pid=3488 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258650 res=1
type=LOGIN msg=audit(1674684001.719:4257593): pid=3487 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258651 res=1
type=USER_START msg=audit(1674684001.758:4257594): pid=3489 uid=0 auid=1055 ses=258649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684001.759:4257595): pid=3486 uid=0 auid=0 ses=258648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684001.759:4257596): pid=3489 uid=0 auid=1055 ses=258649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684001.760:4257597): pid=3488 uid=0 auid=0 ses=258650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684001.760:4257598): pid=3488 uid=0 auid=0 ses=258650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684001.761:4257599): pid=3487 uid=0 auid=0 ses=258651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684001.761:4257600): pid=3486 uid=0 auid=0 ses=258648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684001.761:4257601): pid=3487 uid=0 auid=0 ses=258651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684001.788:4257602): pid=3486 uid=0 auid=0 ses=258648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684001.791:4257603): pid=3486 uid=0 auid=0 ses=258648 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684001.869:4257604): pid=3487 uid=0 auid=0 ses=258651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684001.871:4257605): pid=3487 uid=0 auid=0 ses=258651 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684002.089:4257606): pid=3489 uid=0 auid=1055 ses=258649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684002.091:4257607): pid=3489 uid=0 auid=1055 ses=258649 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684005.085:4257608): pid=3488 uid=0 auid=0 ses=258650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684005.087:4257609): pid=3488 uid=0 auid=0 ses=258650 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684061.104:4257610): pid=3699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684061.104:4257611): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684061.104:4257612): pid=3699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684061.104:4257613): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684061.105:4257614): pid=3699 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258652 res=1
type=LOGIN msg=audit(1674684061.105:4257615): pid=3700 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258653 res=1
type=USER_START msg=audit(1674684061.139:4257616): pid=3700 uid=0 auid=1055 ses=258653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684061.139:4257617): pid=3699 uid=0 auid=0 ses=258652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684061.139:4257618): pid=3700 uid=0 auid=1055 ses=258653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684061.139:4257619): pid=3699 uid=0 auid=0 ses=258652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684061.164:4257620): pid=3699 uid=0 auid=0 ses=258652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684061.166:4257621): pid=3699 uid=0 auid=0 ses=258652 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684061.385:4257622): pid=3700 uid=0 auid=1055 ses=258653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684061.388:4257623): pid=3700 uid=0 auid=1055 ses=258653 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674684062.788:4257624): avc: denied { read } for pid=3730 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674684062.788:4257624): avc: denied { open } for pid=3730 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684062.788:4257624): arch=c000003e syscall=2 success=yes exit=18 a0=55e32933df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684062.788:4257624): proctitle="dovecot/auth"
type=AVC msg=audit(1674684062.788:4257625): avc: denied { getattr } for pid=3730 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684062.788:4257625): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff0efdeea0 a2=7fff0efdeea0 a3=fffffc00 items=0 ppid=5547 pid=3730 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684062.788:4257625): proctitle="dovecot/auth"
type=AVC msg=audit(1674684068.035:4257626): avc: denied { name_connect } for pid=3730 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674684068.035:4257626): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff0efdec90 a2=10 a3=7fff0efdec8c items=0 ppid=5547 pid=3730 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684068.035:4257626): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674684069.123:4257627): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674684069.123:4257627): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b07486b9010 items=0 ppid=3747 pid=3752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684069.123:4257627): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003230322E35352E3136362E3930002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=AVC msg=audit(1674684070.978:4257628): avc: denied { write } for pid=3802 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674684070.978:4257628): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc65f53cb0 a2=6e a3=63d1a6a6 items=0 ppid=5547 pid=3802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684070.978:4257628): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674684108.757:4257629): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674684108.757:4257629): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b76d9d68010 items=0 ppid=3979 pid=3984 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684108.757:4257629): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3134332E3131312E323132002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674684121.409:4257630): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684121.409:4257631): pid=4025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684121.410:4257632): pid=4025 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258654 res=1
type=USER_START msg=audit(1674684121.432:4257633): pid=4025 uid=0 auid=1055 ses=258654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684121.434:4257634): pid=4025 uid=0 auid=1055 ses=258654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684121.729:4257635): pid=4025 uid=0 auid=1055 ses=258654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684121.732:4257636): pid=4025 uid=0 auid=1055 ses=258654 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674684143.768:4257637): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=4096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684143.769:4257638): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=4096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684143.769:4257639): pid=4096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=4096 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674684144.142:4257640): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=4096 suid=74 rport=53008 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.13.29.110 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674684144.142:4257641): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256 spid=4096 suid=74 rport=53008 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=106.13.29.110 terminal=? res=success'
type=USER_AUTH msg=audit(1674684145.771:4257642): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=106.13.29.110 addr=106.13.29.110 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684148.123:4257643): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=106.13.29.110 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684148.527:4257644): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=106.13.29.110 addr=106.13.29.110 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684150.625:4257645): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=106.13.29.110 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684151.026:4257646): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=106.13.29.110 addr=106.13.29.110 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684153.204:4257647): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=106.13.29.110 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684153.604:4257648): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=106.13.29.110 addr=106.13.29.110 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674684154.582:4257649): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674684154.582:4257649): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fef23dbc010 items=0 ppid=4156 pid=4159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684154.582:4257649): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674684154.586:4257650): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674684154.586:4257650): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1cdc47a010 items=0 ppid=4156 pid=4160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684154.586:4257650): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674684154.589:4257651): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674684154.589:4257651): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5c84847010 items=0 ppid=4156 pid=4161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684154.589:4257651): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674684154.593:4257652): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674684154.593:4257652): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9faddb0010 items=0 ppid=4156 pid=4162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684154.593:4257652): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674684154.885:4257653): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674684154.885:4257653): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa59799b010 items=0 ppid=4156 pid=4170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684154.885:4257653): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132312E3136382E33342E323131002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674684154.891:4257654): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674684154.891:4257654): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe459d7e010 items=0 ppid=4156 pid=4171 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684154.891:4257654): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132312E3136382E33342E323131002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674684154.897:4257655): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674684154.897:4257655): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fca99323010 items=0 ppid=4156 pid=4172 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684154.897:4257655): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130362E31332E32392E313130002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674684154.902:4257656): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674684154.902:4257656): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f128443f010 items=0 ppid=4156 pid=4173 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684154.902:4257656): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130362E31332E32392E313130002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674684155.722:4257657): pid=4095 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=106.13.29.110 terminal=ssh res=failed'
type=AVC msg=audit(1674684156.634:4257658): avc: denied { name_connect } for pid=3730 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674684156.634:4257658): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff0efdec90 a2=10 a3=7fff0efdec8c items=0 ppid=5547 pid=3730 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684156.634:4257658): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674684157.718:4257659): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674684157.718:4257659): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5591ca0010 items=0 ppid=4189 pid=4194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684157.718:4257659): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131362E3131342E39342E323330002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=AVC msg=audit(1674684163.411:4257660): avc: denied { write } for pid=3802 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674684163.411:4257660): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc65f53cb0 a2=6e a3=63d1a703 items=0 ppid=5547 pid=3802 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684163.411:4257660): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674684181.748:4257661): pid=4264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684181.748:4257662): pid=4264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684181.748:4257663): pid=4264 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258655 res=1
type=USER_START msg=audit(1674684181.768:4257664): pid=4264 uid=0 auid=1055 ses=258655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684181.771:4257665): pid=4264 uid=0 auid=1055 ses=258655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684182.021:4257666): pid=4264 uid=0 auid=1055 ses=258655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684182.023:4257667): pid=4264 uid=0 auid=1055 ses=258655 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684241.036:4257668): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684241.036:4257669): pid=4443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684241.037:4257670): pid=4443 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258656 res=1
type=USER_START msg=audit(1674684241.047:4257671): pid=4443 uid=0 auid=1055 ses=258656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684241.048:4257672): pid=4443 uid=0 auid=1055 ses=258656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684241.286:4257673): pid=4443 uid=0 auid=1055 ses=258656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684241.288:4257674): pid=4443 uid=0 auid=1055 ses=258656 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674684256.592:4257675): avc: denied { read } for pid=4505 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674684256.592:4257675): avc: denied { open } for pid=4505 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684256.592:4257675): arch=c000003e syscall=2 success=yes exit=18 a0=55a645be6f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684256.592:4257675): proctitle="dovecot/auth"
type=AVC msg=audit(1674684256.592:4257676): avc: denied { getattr } for pid=4505 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684256.592:4257676): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffce0ca7580 a2=7ffce0ca7580 a3=fffffc00 items=0 ppid=5547 pid=4505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684256.592:4257676): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674684272.817:4257677): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674684272.817:4257677): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b861fcb3010 items=0 ppid=4569 pid=4574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684272.817:4257677): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232312E3133312E33342E313730002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674684301.304:4257678): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684301.304:4257679): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684301.304:4257680): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684301.304:4257681): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684301.304:4257682): pid=4654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684301.304:4257683): pid=4652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684301.304:4257684): pid=4653 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258657 res=1
type=LOGIN msg=audit(1674684301.304:4257685): pid=4654 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258658 res=1
type=LOGIN msg=audit(1674684301.304:4257686): pid=4652 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258659 res=1
type=USER_START msg=audit(1674684301.352:4257687): pid=4652 uid=0 auid=0 ses=258659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684301.352:4257688): pid=4654 uid=0 auid=1055 ses=258658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684301.353:4257689): pid=4653 uid=0 auid=0 ses=258657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684301.353:4257690): pid=4654 uid=0 auid=1055 ses=258658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684301.354:4257691): pid=4652 uid=0 auid=0 ses=258659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684301.354:4257692): pid=4653 uid=0 auid=0 ses=258657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684301.425:4257693): pid=4653 uid=0 auid=0 ses=258657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684301.427:4257694): pid=4653 uid=0 auid=0 ses=258657 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684301.695:4257695): pid=4654 uid=0 auid=1055 ses=258658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684301.697:4257696): pid=4654 uid=0 auid=1055 ses=258658 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684304.675:4257697): pid=4652 uid=0 auid=0 ses=258659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684304.676:4257698): pid=4652 uid=0 auid=0 ses=258659 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684361.692:4257699): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684361.692:4257700): pid=4853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684361.692:4257701): pid=4853 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258660 res=1
type=USER_START msg=audit(1674684361.710:4257702): pid=4853 uid=0 auid=1055 ses=258660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684361.714:4257703): pid=4853 uid=0 auid=1055 ses=258660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684361.958:4257704): pid=4853 uid=0 auid=1055 ses=258660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684361.960:4257705): pid=4853 uid=0 auid=1055 ses=258660 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674684421.829:4257706): avc: denied { read } for pid=5094 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674684421.829:4257706): avc: denied { open } for pid=5094 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684421.829:4257706): arch=c000003e syscall=2 success=yes exit=18 a0=55d30620cf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=5094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684421.829:4257706): proctitle="dovecot/auth"
type=AVC msg=audit(1674684421.829:4257707): avc: denied { getattr } for pid=5094 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684421.829:4257707): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc2c410910 a2=7ffc2c410910 a3=fffffc00 items=0 ppid=5547 pid=5094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684421.829:4257707): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674684421.981:4257708): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684421.981:4257709): pid=5104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684421.982:4257710): pid=5104 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258661 res=1
type=USER_START msg=audit(1674684421.995:4257711): pid=5104 uid=0 auid=1055 ses=258661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684421.996:4257712): pid=5104 uid=0 auid=1055 ses=258661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684422.216:4257713): pid=5104 uid=0 auid=1055 ses=258661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684422.219:4257714): pid=5104 uid=0 auid=1055 ses=258661 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674684422.379:4257715): avc: denied { name_connect } for pid=5094 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674684422.379:4257715): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc2c410700 a2=10 a3=7ffc2c4106fc items=0 ppid=5547 pid=5094 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684422.379:4257715): proctitle="dovecot/auth"
type=AVC msg=audit(1674684422.416:4257716): avc: denied { write } for pid=5134 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674684422.416:4257716): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc943fbba0 a2=6e a3=63d1a806 items=0 ppid=5547 pid=5134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684422.416:4257716): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674684424.886:4257717): avc: denied { write } for pid=5134 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674684424.886:4257717): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc943fbba0 a2=6e a3=63d1a808 items=0 ppid=5547 pid=5134 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684424.886:4257717): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674684445.190:4257718): avc: denied { name_connect } for pid=5094 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674684445.190:4257718): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffc2c410700 a2=10 a3=7ffc2c4106fc items=0 ppid=5547 pid=5094 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684445.190:4257718): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674684481.235:4257719): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684481.235:4257720): pid=5371 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684481.235:4257721): pid=5371 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258662 res=1
type=USER_START msg=audit(1674684481.250:4257722): pid=5371 uid=0 auid=1055 ses=258662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684481.252:4257723): pid=5371 uid=0 auid=1055 ses=258662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684481.488:4257724): pid=5371 uid=0 auid=1055 ses=258662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684481.490:4257725): pid=5371 uid=0 auid=1055 ses=258662 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674684492.833:4257726): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684492.833:4257727): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684492.833:4257728): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5410 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674684493.039:4257729): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=5410 suid=74 rport=37211 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.133.135.236 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674684493.039:4257730): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=5410 suid=74 rport=37211 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.133.135.236 terminal=? res=success'
type=USER_AUTH msg=audit(1674684494.376:4257731): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=220.133.135.236 addr=220.133.135.236 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684496.308:4257732): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.133.135.236 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684496.884:4257733): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=220.133.135.236 addr=220.133.135.236 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684498.088:4257734): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.133.135.236 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684498.864:4257735): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=220.133.135.236 addr=220.133.135.236 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684501.012:4257736): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.133.135.236 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674684501.395:4257737): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5410 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684501.395:4257738): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5410 suid=74 rport=37211 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=220.133.135.236 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684501.396:4257739): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684501.396:4257740): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684501.396:4257741): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5409 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674684501.396:4257742): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=220.133.135.236 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674684541.509:4257744): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684541.509:4257743): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684541.509:4257745): pid=5575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684541.509:4257746): pid=5574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684541.511:4257747): pid=5575 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258663 res=1
type=LOGIN msg=audit(1674684541.511:4257748): pid=5574 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258664 res=1
type=USER_START msg=audit(1674684541.553:4257749): pid=5574 uid=0 auid=0 ses=258664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684541.553:4257750): pid=5575 uid=0 auid=1055 ses=258663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684541.554:4257751): pid=5575 uid=0 auid=1055 ses=258663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684541.555:4257752): pid=5574 uid=0 auid=0 ses=258664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684541.824:4257753): pid=5575 uid=0 auid=1055 ses=258663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684541.828:4257754): pid=5575 uid=0 auid=1055 ses=258663 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684542.682:4257755): pid=5574 uid=0 auid=0 ses=258664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684542.684:4257756): pid=5574 uid=0 auid=0 ses=258664 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674684544.837:4257757): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674684544.837:4257757): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b63013ea010 items=0 ppid=5602 pid=5607 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684544.837:4257757): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3136352E31372E313636002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=CRYPTO_KEY_USER msg=audit(1674684550.272:4257758): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684550.272:4257759): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684550.272:4257760): pid=5629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5629 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674684550.507:4257761): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=5629 suid=74 rport=49182 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674684550.508:4257762): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=5629 suid=74 rport=49182 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=USER_AUTH msg=audit(1674684552.622:4257763): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684554.182:4257764): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674684554.905:4257765): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5629 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684554.905:4257766): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=5629 suid=74 rport=49182 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684554.906:4257767): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=5625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684554.907:4257768): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=5625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684554.907:4257769): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=5625 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674684554.907:4257770): pid=5625 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674684601.700:4257771): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684601.700:4257772): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684601.700:4257773): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684601.700:4257774): pid=5789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684601.700:4257775): pid=5787 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258665 res=1
type=LOGIN msg=audit(1674684601.700:4257776): pid=5789 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258666 res=1
type=USER_ACCT msg=audit(1674684601.700:4257777): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684601.700:4257778): pid=5788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684601.700:4257779): pid=5788 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258667 res=1
type=USER_START msg=audit(1674684601.763:4257780): pid=5789 uid=0 auid=1055 ses=258666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684601.763:4257781): pid=5787 uid=0 auid=0 ses=258665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684601.764:4257782): pid=5788 uid=0 auid=0 ses=258667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684601.765:4257783): pid=5787 uid=0 auid=0 ses=258665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684601.765:4257784): pid=5788 uid=0 auid=0 ses=258667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684601.765:4257785): pid=5789 uid=0 auid=1055 ses=258666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684601.799:4257786): pid=5787 uid=0 auid=0 ses=258665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684601.802:4257787): pid=5787 uid=0 auid=0 ses=258665 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684602.129:4257788): pid=5789 uid=0 auid=1055 ses=258666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684602.131:4257789): pid=5789 uid=0 auid=1055 ses=258666 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684605.144:4257790): pid=5788 uid=0 auid=0 ses=258667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684605.146:4257791): pid=5788 uid=0 auid=0 ses=258667 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684661.164:4257792): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684661.164:4257793): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684661.165:4257794): pid=5994 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258668 res=1
type=USER_START msg=audit(1674684661.179:4257795): pid=5994 uid=0 auid=1055 ses=258668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684661.180:4257796): pid=5994 uid=0 auid=1055 ses=258668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684661.445:4257797): pid=5994 uid=0 auid=1055 ses=258668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684661.447:4257798): pid=5994 uid=0 auid=1055 ses=258668 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674684663.193:4257799): avc: denied { read } for pid=6013 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674684663.193:4257799): avc: denied { open } for pid=6013 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684663.193:4257799): arch=c000003e syscall=2 success=yes exit=18 a0=5609c7073f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=6013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684663.193:4257799): proctitle="dovecot/auth"
type=AVC msg=audit(1674684663.193:4257800): avc: denied { getattr } for pid=6013 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684663.193:4257800): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe5abb2610 a2=7ffe5abb2610 a3=fffffc00 items=0 ppid=5547 pid=6013 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684663.193:4257800): proctitle="dovecot/auth"
type=AVC msg=audit(1674684668.625:4257801): avc: denied { name_connect } for pid=6013 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674684668.625:4257801): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffe5abb2400 a2=10 a3=7ffe5abb23fc items=0 ppid=5547 pid=6013 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684668.625:4257801): proctitle="dovecot/auth"
type=AVC msg=audit(1674684668.650:4257802): avc: denied { write } for pid=6031 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674684668.650:4257802): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc97457cb0 a2=6e a3=63d1a8fc items=0 ppid=5547 pid=6031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684668.650:4257802): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674684669.805:4257803): avc: denied { read append } for pid=6033 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674684669.805:4257803): avc: denied { open } for pid=6033 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684669.805:4257803): arch=c000003e syscall=2 success=yes exit=8 a0=55ea199d3a60 a1=402 a2=7fffb2e8a940 a3=7fffb2e8a3e0 items=0 ppid=5547 pid=6033 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684669.805:4257803): proctitle="dovecot/imap"
type=AVC msg=audit(1674684669.805:4257804): avc: denied { getattr } for pid=6033 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684669.805:4257804): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fffb2e8a8a0 a2=7fffb2e8a8a0 a3=7fffb2e8a320 items=0 ppid=5547 pid=6033 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684669.805:4257804): proctitle="dovecot/imap"
type=AVC msg=audit(1674684669.805:4257805): avc: denied { write } for pid=6033 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684669.805:4257805): arch=c000003e syscall=2 success=yes exit=10 a0=55ea199d8990 a1=2 a2=7fffb2e8a640 a3=7fffb2e8a0e0 items=0 ppid=5547 pid=6033 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684669.805:4257805): proctitle="dovecot/imap"
type=AVC msg=audit(1674684669.805:4257806): avc: denied { lock } for pid=6033 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684669.805:4257806): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffb2e8a540 a3=63d1a8fd items=0 ppid=5547 pid=6033 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684669.805:4257806): proctitle="dovecot/imap"
type=AVC msg=audit(1674684669.805:4257807): avc: denied { read } for pid=6033 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674684669.805:4257807): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55ea19a012f8 a2=90800 a3=0 items=0 ppid=5547 pid=6033 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684669.805:4257807): proctitle="dovecot/imap"
type=AVC msg=audit(1674684669.806:4257808): avc: denied { getattr } for pid=6033 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674684669.806:4257808): arch=c000003e syscall=4 success=yes exit=0 a0=55ea199c3a60 a1=7fffb2e8a8f0 a2=7fffb2e8a8f0 a3=6f632e6f72676173 items=0 ppid=5547 pid=6033 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684669.806:4257808): proctitle="dovecot/imap"
type=AVC msg=audit(1674684671.704:4257809): avc: denied { write } for pid=6040 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674684671.704:4257809): arch=c000003e syscall=21 success=yes exit=0 a0=55f5acc154c0 a1=2 a2=7b48 a3=7ffd88f3ae20 items=0 ppid=5547 pid=6040 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684671.704:4257809): proctitle="dovecot/imap"
type=NETFILTER_CFG msg=audit(1674684686.021:4257810): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674684686.021:4257810): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b14a4bd7010 items=0 ppid=6100 pid=6105 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684686.021:4257810): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3137372E33362E313039002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=NETFILTER_CFG msg=audit(1674684699.973:4257811): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674684699.973:4257811): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b36581dd010 items=0 ppid=6146 pid=6151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684699.973:4257811): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131362E3131362E3135362E313938002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674684721.464:4257812): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684721.464:4257813): pid=6212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684721.465:4257814): pid=6212 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258669 res=1
type=USER_START msg=audit(1674684721.483:4257815): pid=6212 uid=0 auid=1055 ses=258669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684721.485:4257816): pid=6212 uid=0 auid=1055 ses=258669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684721.814:4257817): pid=6212 uid=0 auid=1055 ses=258669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684721.816:4257818): pid=6212 uid=0 auid=1055 ses=258669 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674684730.023:4257819): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684730.024:4257820): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684730.024:4257821): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6244 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674684730.260:4257822): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=6244 suid=74 rport=60378 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674684730.260:4257823): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=6244 suid=74 rport=60378 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=? res=success'
type=USER_AUTH msg=audit(1674684731.902:4257824): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.107.75.33 addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684733.367:4257825): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684734.081:4257826): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.107.75.33 addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684736.294:4257827): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684736.875:4257828): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.107.75.33 addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684739.364:4257829): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684740.173:4257830): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684740.916:4257831): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.107.75.33 addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684743.284:4257832): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684743.954:4257833): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=222.107.75.33 addr=222.107.75.33 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674684744.280:4257834): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674684744.280:4257834): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb795fe4010 items=0 ppid=6283 pid=6286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684744.280:4257834): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674684744.284:4257835): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674684744.284:4257835): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f237470e010 items=0 ppid=6283 pid=6287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684744.284:4257835): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674684744.288:4257836): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674684744.288:4257836): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f464b538010 items=0 ppid=6283 pid=6288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684744.288:4257836): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674684744.293:4257837): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674684744.293:4257837): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff708083010 items=0 ppid=6283 pid=6289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684744.293:4257837): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674684744.595:4257838): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674684744.595:4257838): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5d907c3010 items=0 ppid=6283 pid=6298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684744.595:4257838): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003232302E3132322E3134352E313338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674684744.602:4257839): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674684744.602:4257839): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa5fae0e010 items=0 ppid=6283 pid=6299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684744.602:4257839): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003232302E3132322E3134352E313338002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674684744.607:4257840): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674684744.607:4257840): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0622524010 items=0 ppid=6283 pid=6300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684744.607:4257840): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003232322E3130372E37352E3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674684744.613:4257841): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674684744.613:4257841): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff10d62e010 items=0 ppid=6283 pid=6301 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684744.613:4257841): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003232322E3130372E37352E3333002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674684745.398:4257842): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674684745.400:4257843): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=maxtries exceeded acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674684745.400:4257844): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=6244 suid=74 rport=60378 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684745.400:4257845): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6244 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684745.401:4257846): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=6242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684745.401:4257847): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=6242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674684745.401:4257848): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=6242 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674684745.401:4257849): pid=6242 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=222.107.75.33 terminal=ssh res=failed'
type=AVC msg=audit(1674684745.521:4257850): avc: denied { write } for pid=6031 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674684745.521:4257850): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc97457cb0 a2=6e a3=63d1a949 items=0 ppid=5547 pid=6031 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674684745.521:4257850): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674684781.833:4257851): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684781.833:4257852): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684781.833:4257853): pid=6527 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684781.833:4257854): pid=6528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684781.834:4257855): pid=6527 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258670 res=1
type=LOGIN msg=audit(1674684781.834:4257856): pid=6528 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258671 res=1
type=USER_START msg=audit(1674684781.867:4257858): pid=6528 uid=0 auid=1055 ses=258671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684781.867:4257857): pid=6527 uid=0 auid=0 ses=258670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684781.868:4257859): pid=6528 uid=0 auid=1055 ses=258671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684781.870:4257860): pid=6527 uid=0 auid=0 ses=258670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684781.935:4257861): pid=6527 uid=0 auid=0 ses=258670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684781.937:4257862): pid=6527 uid=0 auid=0 ses=258670 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684782.139:4257863): pid=6528 uid=0 auid=1055 ses=258671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684782.140:4257864): pid=6528 uid=0 auid=1055 ses=258671 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684841.157:4257865): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684841.157:4257866): pid=6731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684841.159:4257867): pid=6731 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258672 res=1
type=USER_START msg=audit(1674684841.171:4257868): pid=6731 uid=0 auid=1055 ses=258672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684841.172:4257869): pid=6731 uid=0 auid=1055 ses=258672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684841.448:4257870): pid=6731 uid=0 auid=1055 ses=258672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684841.449:4257871): pid=6731 uid=0 auid=1055 ses=258672 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684901.463:4257872): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684901.463:4257873): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684901.463:4257874): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684901.463:4257875): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684901.463:4257876): pid=6916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684901.463:4257877): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684901.463:4257878): pid=6915 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258673 res=1
type=LOGIN msg=audit(1674684901.463:4257879): pid=6916 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258674 res=1
type=LOGIN msg=audit(1674684901.464:4257880): pid=6914 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258675 res=1
type=USER_START msg=audit(1674684901.500:4257881): pid=6916 uid=0 auid=1055 ses=258674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684901.501:4257882): pid=6915 uid=0 auid=0 ses=258673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684901.501:4257883): pid=6916 uid=0 auid=1055 ses=258674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674684901.501:4257884): pid=6914 uid=0 auid=0 ses=258675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684901.503:4257885): pid=6915 uid=0 auid=0 ses=258673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684901.503:4257886): pid=6914 uid=0 auid=0 ses=258675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684901.573:4257887): pid=6914 uid=0 auid=0 ses=258675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684901.576:4257888): pid=6914 uid=0 auid=0 ses=258675 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684901.866:4257889): pid=6916 uid=0 auid=1055 ses=258674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684901.868:4257890): pid=6916 uid=0 auid=1055 ses=258674 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684904.840:4257891): pid=6915 uid=0 auid=0 ses=258673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684904.841:4257892): pid=6915 uid=0 auid=0 ses=258673 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674684961.858:4257893): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674684961.858:4257894): pid=7159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674684961.858:4257895): pid=7159 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258676 res=1
type=USER_START msg=audit(1674684961.875:4257896): pid=7159 uid=0 auid=1055 ses=258676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674684961.877:4257897): pid=7159 uid=0 auid=1055 ses=258676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674684962.145:4257898): pid=7159 uid=0 auid=1055 ses=258676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674684962.146:4257899): pid=7159 uid=0 auid=1055 ses=258676 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685021.159:4257900): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685021.159:4257901): pid=7346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685021.159:4257902): pid=7346 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258677 res=1
type=USER_START msg=audit(1674685021.171:4257903): pid=7346 uid=0 auid=1055 ses=258677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685021.172:4257904): pid=7346 uid=0 auid=1055 ses=258677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685021.405:4257905): pid=7346 uid=0 auid=1055 ses=258677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685021.407:4257906): pid=7346 uid=0 auid=1055 ses=258677 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674685045.830:4257907): avc: denied { read } for pid=7465 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674685045.830:4257907): avc: denied { open } for pid=7465 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685045.830:4257907): arch=c000003e syscall=2 success=yes exit=18 a0=55b105e92f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=7465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685045.830:4257907): proctitle="dovecot/auth"
type=AVC msg=audit(1674685045.830:4257908): avc: denied { getattr } for pid=7465 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685045.830:4257908): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff90584140 a2=7fff90584140 a3=fffffc00 items=0 ppid=5547 pid=7465 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685045.830:4257908): proctitle="dovecot/auth"
type=AVC msg=audit(1674685046.369:4257909): avc: denied { name_connect } for pid=7465 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674685046.369:4257909): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff90583f30 a2=10 a3=7fff90583f2c items=0 ppid=5547 pid=7465 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685046.369:4257909): proctitle="dovecot/auth"
type=AVC msg=audit(1674685046.401:4257910): avc: denied { write } for pid=7494 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674685046.401:4257910): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffcbd57100 a2=6e a3=63d1aa76 items=0 ppid=5547 pid=7494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685046.401:4257910): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674685075.249:4257911): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685075.249:4257912): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685075.249:4257913): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7640 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685075.388:4257914): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=7640 suid=74 rport=23786 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685075.388:4257915): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=7640 suid=74 rport=23786 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=USER_AUTH msg=audit(1674685076.221:4257916): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=195.226.194.242 addr=195.226.194.242 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685078.384:4257917): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674685078.526:4257918): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7640 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685078.526:4257919): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=7640 suid=74 rport=23786 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685078.527:4257920): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=7639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685078.527:4257921): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=7639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685078.527:4257922): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=7639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674685078.528:4257923): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.226.194.242 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674685079.424:4257924): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674685079.424:4257924): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd3c76fb010 items=0 ppid=7662 pid=7667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685079.424:4257924): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674685079.429:4257925): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674685079.429:4257925): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6e4f9ef010 items=0 ppid=7662 pid=7668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685079.429:4257925): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674685079.433:4257926): table=filter family=2 entries=1063
type=SYSCALL msg=audit(1674685079.433:4257926): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9e9a838010 items=0 ppid=7662 pid=7669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685079.433:4257926): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674685079.437:4257927): table=filter family=2 entries=1062
type=SYSCALL msg=audit(1674685079.437:4257927): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe0202b3010 items=0 ppid=7662 pid=7670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685079.437:4257927): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674685079.750:4257928): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674685079.750:4257928): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1c017fb010 items=0 ppid=7662 pid=7680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685079.750:4257928): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730032342E3139392E39362E323337002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685079.756:4257929): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674685079.756:4257929): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5925830010 items=0 ppid=7662 pid=7681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685079.756:4257929): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640032342E3139392E39362E323337002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674685079.761:4257930): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674685079.761:4257930): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc3140f9010 items=0 ppid=7662 pid=7682 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685079.761:4257930): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003139352E3232362E3139342E323432002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685079.766:4257931): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674685079.766:4257931): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fca0cbfb010 items=0 ppid=7662 pid=7683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685079.766:4257931): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003139352E3232362E3139342E323432002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674685081.424:4257932): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685081.424:4257933): pid=7693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685081.425:4257934): pid=7693 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258678 res=1
type=USER_START msg=audit(1674685081.441:4257935): pid=7693 uid=0 auid=1055 ses=258678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685081.443:4257936): pid=7693 uid=0 auid=1055 ses=258678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685081.713:4257937): pid=7693 uid=0 auid=1055 ses=258678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685081.716:4257938): pid=7693 uid=0 auid=1055 ses=258678 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674685083.005:4257939): avc: denied { name_connect } for pid=7465 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674685083.005:4257939): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7fff90583f30 a2=10 a3=7fff90583f2c items=0 ppid=5547 pid=7465 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685083.005:4257939): proctitle="dovecot/auth"
type=AVC msg=audit(1674685083.019:4257940): avc: denied { write } for pid=7494 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674685083.019:4257940): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffcbd57100 a2=6e a3=63d1aa9b items=0 ppid=5547 pid=7494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685083.019:4257940): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674685099.916:4257941): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674685099.916:4257941): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b4ba980c010 items=0 ppid=7751 pid=7756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685099.916:4257941): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231392E3135372E39352E3737002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=USER_ACCT msg=audit(1674685141.732:4257942): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685141.732:4257943): pid=7908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685141.734:4257944): pid=7908 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258679 res=1
type=USER_START msg=audit(1674685141.749:4257945): pid=7908 uid=0 auid=1055 ses=258679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685141.750:4257946): pid=7908 uid=0 auid=1055 ses=258679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685142.031:4257947): pid=7908 uid=0 auid=1055 ses=258679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685142.032:4257948): pid=7908 uid=0 auid=1055 ses=258679 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685201.046:4257949): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685201.046:4257950): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685201.046:4257951): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685201.046:4257952): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685201.046:4257953): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685201.046:4257954): pid=8107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685201.046:4257955): pid=8105 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258680 res=1
type=CRED_ACQ msg=audit(1674685201.046:4257956): pid=8106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685201.047:4257957): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685201.047:4257958): pid=8107 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258681 res=1
type=LOGIN msg=audit(1674685201.047:4257959): pid=8106 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258682 res=1
type=LOGIN msg=audit(1674685201.047:4257960): pid=8108 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258683 res=1
type=USER_START msg=audit(1674685201.091:4257961): pid=8106 uid=0 auid=0 ses=258682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674685201.091:4257962): pid=8107 uid=0 auid=0 ses=258681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674685201.092:4257963): pid=8108 uid=0 auid=1055 ses=258683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674685201.092:4257964): pid=8105 uid=0 auid=0 ses=258680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685201.093:4257965): pid=8107 uid=0 auid=0 ses=258681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685201.093:4257966): pid=8106 uid=0 auid=0 ses=258682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685201.094:4257967): pid=8105 uid=0 auid=0 ses=258680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685201.094:4257968): pid=8108 uid=0 auid=1055 ses=258683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685201.119:4257969): pid=8105 uid=0 auid=0 ses=258680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685201.123:4257970): pid=8105 uid=0 auid=0 ses=258680 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685201.180:4257971): pid=8107 uid=0 auid=0 ses=258681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685201.183:4257972): pid=8107 uid=0 auid=0 ses=258681 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685201.401:4257973): pid=8108 uid=0 auid=1055 ses=258683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685201.404:4257974): pid=8108 uid=0 auid=1055 ses=258683 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685204.435:4257975): pid=8106 uid=0 auid=0 ses=258682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685204.437:4257976): pid=8106 uid=0 auid=0 ses=258682 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674685204.955:4257977): table=filter family=2 entries=1061
type=SYSCALL msg=audit(1674685204.955:4257977): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b6a11967010 items=0 ppid=1588 pid=8146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.955:4257977): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231392E3134372E39312E392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A32303A3332002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.959:4257978): table=filter family=2 entries=1060
type=SYSCALL msg=audit(1674685204.959:4257978): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ba06a230010 items=0 ppid=1588 pid=8147 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.959:4257978): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003230332E39392E3130362E3234332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A32303A3532002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.963:4257979): table=filter family=2 entries=1059
type=SYSCALL msg=audit(1674685204.963:4257979): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b60b11a3010 items=0 ppid=1588 pid=8148 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.963:4257979): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E34332E36392E3135302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A32313A3031002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.966:4257980): table=filter family=2 entries=1058
type=SYSCALL msg=audit(1674685204.966:4257980): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9147145010 items=0 ppid=1588 pid=8149 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.966:4257980): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E37322E39322E3137342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A32373A3331002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.971:4257981): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674685204.971:4257981): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b3aed640010 items=0 ppid=1588 pid=8150 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.971:4257981): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E3231322E35382E3234322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A33303A3530002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.976:4257982): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674685204.976:4257982): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1977488010 items=0 ppid=1588 pid=8151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.976:4257982): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3137302E3138312E3134312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A33333A3237002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.981:4257983): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674685204.981:4257983): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad7fc9c7010 items=0 ppid=1588 pid=8152 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.981:4257983): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E3232392E3132362E3134362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A33363A3239002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.985:4257984): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674685204.985:4257984): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b61cfec5010 items=0 ppid=1588 pid=8153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.985:4257984): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3135392E3134372E3133372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A34333A3136002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.989:4257985): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674685204.989:4257985): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b978e265010 items=0 ppid=1588 pid=8154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.989:4257985): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131392E3134352E3139302E3130322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A34353A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.993:4257986): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674685204.993:4257986): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aff7c380010 items=0 ppid=1588 pid=8155 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.993:4257986): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E38342E3138322E3231392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A34363A3137002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685204.997:4257987): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674685204.997:4257987): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2aff21335010 items=0 ppid=1588 pid=8156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685204.997:4257987): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132332E31332E3139382E3133312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A35303A3530002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685205.000:4257988): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674685205.000:4257988): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ba81092f010 items=0 ppid=1588 pid=8157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685205.000:4257988): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3137302E35332E38322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432313A35363A3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685205.005:4257989): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674685205.005:4257989): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b52a4f9e010 items=0 ppid=1588 pid=8158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685205.005:4257989): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033362E33342E3132302E3232322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A30353A3136002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685205.009:4257990): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674685205.009:4257990): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0a7570f010 items=0 ppid=1588 pid=8159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685205.009:4257990): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033362E372E3137372E39352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A30373A3035002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685205.014:4257991): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674685205.014:4257991): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ab08be14010 items=0 ppid=1588 pid=8160 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685205.014:4257991): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131332E3130372E3234342E3130332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A30373A3135002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685205.019:4257992): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674685205.019:4257992): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b7105af7010 items=0 ppid=1588 pid=8161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685205.019:4257992): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232332E38322E39352E3232372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A31303A3239002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685205.024:4257993): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674685205.024:4257993): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af48d02e010 items=0 ppid=1588 pid=8162 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685205.024:4257993): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232332E38342E33312E3130382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A31353A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685205.028:4257994): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674685205.028:4257994): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b23c70f7010 items=0 ppid=1588 pid=8163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685205.028:4257994): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231392E3133392E3130312E3133362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A31393A3334002D6A0044524F50
type=USER_ACCT msg=audit(1674685261.458:4257995): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685261.458:4257996): pid=8353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685261.459:4257997): pid=8353 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258684 res=1
type=USER_START msg=audit(1674685261.480:4257998): pid=8353 uid=0 auid=1055 ses=258684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685261.482:4257999): pid=8353 uid=0 auid=1055 ses=258684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685261.785:4258000): pid=8353 uid=0 auid=1055 ses=258684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685261.787:4258001): pid=8353 uid=0 auid=1055 ses=258684 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685265.567:4258002): pid=8374 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685265.567:4258003): pid=8374 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674685265.567:4258004): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685265.586:4258005): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685265.590:4258006): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685265.590:4258007): pid=8374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685265.612:4258008): pid=8378 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685265.612:4258009): pid=8378 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674685265.612:4258010): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685265.626:4258011): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685265.628:4258012): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685265.629:4258013): pid=8378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685265.649:4258014): pid=8385 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685265.649:4258015): pid=8385 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674685265.649:4258016): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685265.662:4258017): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685265.665:4258018): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685265.665:4258019): pid=8385 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685265.788:4258020): pid=8390 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685265.788:4258021): pid=8390 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674685265.789:4258022): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685265.803:4258023): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685265.806:4258024): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685265.806:4258025): pid=8390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685265.826:4258026): pid=8394 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685265.827:4258027): pid=8394 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674685265.827:4258028): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685265.840:4258029): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685265.844:4258030): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685265.844:4258031): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685265.872:4258032): pid=8404 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685265.872:4258033): pid=8404 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674685265.872:4258034): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685265.888:4258035): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685265.891:4258036): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685265.891:4258037): pid=8404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685265.922:4258038): pid=8409 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685265.923:4258039): pid=8409 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674685265.923:4258040): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685265.937:4258041): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685265.941:4258042): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685265.941:4258043): pid=8409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685265.964:4258044): pid=8413 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685265.964:4258045): pid=8413 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674685265.964:4258046): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685265.978:4258047): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685265.981:4258048): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685265.981:4258049): pid=8413 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685266.001:4258050): pid=8417 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685266.001:4258051): pid=8417 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674685266.001:4258052): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685266.015:4258053): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685266.018:4258054): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685266.019:4258055): pid=8417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685266.039:4258056): pid=8422 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685266.039:4258057): pid=8422 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674685266.039:4258058): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685266.054:4258059): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685266.057:4258060): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685266.057:4258061): pid=8422 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685266.079:4258062): pid=8428 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685266.079:4258063): pid=8428 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674685266.080:4258064): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685266.093:4258065): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685266.096:4258066): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685266.096:4258067): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685272.126:4258068): pid=8448 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685272.126:4258069): pid=8448 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674685272.126:4258070): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685272.141:4258071): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685272.192:4258072): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685272.192:4258073): pid=8448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685272.222:4258074): pid=8454 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685272.223:4258075): pid=8454 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674685272.223:4258076): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685272.237:4258077): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685272.315:4258078): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685272.315:4258079): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685272.339:4258080): pid=8460 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685272.339:4258081): pid=8460 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685272.339:4258082): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685272.352:4258083): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685272.492:4258084): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685272.492:4258085): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685272.529:4258086): pid=8466 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685272.529:4258087): pid=8466 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674685272.529:4258088): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685272.543:4258089): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685272.546:4258090): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685272.547:4258091): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685272.569:4258092): pid=8471 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685272.569:4258093): pid=8471 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6B3530646B56714C424A6C794F68584A2E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674685272.570:4258094): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685272.584:4258095): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685272.587:4258096): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685272.587:4258097): pid=8471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685272.612:4258098): pid=8476 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685272.612:4258099): pid=8476 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6B3530646B56714C424A6C794F68584A2E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674685272.612:4258100): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685272.626:4258101): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685272.633:4258102): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685272.633:4258103): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685272.654:4258104): pid=8482 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685272.655:4258105): pid=8482 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D6B3530646B56714C424A6C794F68584A2E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674685272.655:4258106): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685272.668:4258107): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685272.672:4258108): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685272.672:4258109): pid=8482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685272.694:4258110): pid=8487 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685272.695:4258111): pid=8487 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674685272.695:4258112): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685272.708:4258113): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685272.714:4258114): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685272.714:4258115): pid=8487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685273.084:4258116): pid=8493 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685273.084:4258117): pid=8493 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674685273.084:4258118): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685273.099:4258119): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685273.102:4258120): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685273.102:4258121): pid=8493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685273.746:4258122): pid=8502 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685273.746:4258123): pid=8502 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674685273.746:4258124): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685273.759:4258125): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685273.762:4258126): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685273.762:4258127): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685273.782:4258128): pid=8506 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685273.782:4258129): pid=8506 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674685273.783:4258130): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685273.796:4258131): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685273.799:4258132): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685273.800:4258133): pid=8506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685273.820:4258134): pid=8510 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685273.820:4258135): pid=8510 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674685273.820:4258136): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685273.834:4258137): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685273.837:4258138): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685273.838:4258139): pid=8510 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685273.864:4258140): pid=8516 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685273.864:4258141): pid=8516 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674685273.864:4258142): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685273.878:4258143): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685274.011:4258144): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685274.011:4258145): pid=8516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685274.803:4258146): pid=8523 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685274.803:4258147): pid=8523 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674685274.804:4258148): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685274.818:4258149): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685274.876:4258150): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685274.876:4258151): pid=8523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685274.906:4258152): pid=8528 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685274.906:4258153): pid=8528 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685274.907:4258154): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685274.920:4258155): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685276.100:4258156): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685276.100:4258157): pid=8528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685276.291:4258158): pid=8541 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685276.291:4258159): pid=8541 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685276.291:4258160): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685276.303:4258161): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685282.715:4258162): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685282.716:4258163): pid=8541 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685282.965:4258164): pid=8564 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685282.966:4258165): pid=8564 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685282.966:4258166): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685282.980:4258167): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685284.918:4258168): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685284.918:4258169): pid=8564 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685285.158:4258170): pid=8577 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685285.158:4258171): pid=8577 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F7474312026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F747431202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674685285.159:4258172): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685285.174:4258173): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685286.388:4258174): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685286.389:4258175): pid=8577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685286.481:4258176): pid=8609 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685286.481:4258177): pid=8609 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685286.481:4258178): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685286.495:4258179): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685286.867:4258180): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685286.867:4258181): pid=8609 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685286.986:4258182): pid=8616 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685286.986:4258183): pid=8616 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685286.986:4258184): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685286.999:4258185): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685291.906:4258186): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685291.906:4258187): pid=8616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685292.146:4258188): pid=8646 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685292.146:4258189): pid=8646 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685292.146:4258190): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685292.162:4258191): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685293.289:4258192): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685293.289:4258193): pid=8646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685293.483:4258194): pid=8658 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685293.483:4258195): pid=8658 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685293.484:4258196): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685293.497:4258197): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685294.624:4258198): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685294.624:4258199): pid=8658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685295.371:4258200): pid=8673 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674685295.372:4258201): pid=8673 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674685295.372:4258202): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674685295.391:4258203): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674685296.492:4258204): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674685296.492:4258205): pid=8673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674685321.807:4258206): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685321.807:4258207): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685321.807:4258208): pid=8758 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258685 res=1
type=USER_START msg=audit(1674685321.829:4258209): pid=8758 uid=0 auid=1055 ses=258685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685321.832:4258210): pid=8758 uid=0 auid=1055 ses=258685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685322.100:4258211): pid=8758 uid=0 auid=1055 ses=258685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685322.102:4258212): pid=8758 uid=0 auid=1055 ses=258685 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674685349.621:4258213): avc: denied { read } for pid=8885 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674685349.621:4258213): avc: denied { open } for pid=8885 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685349.621:4258213): arch=c000003e syscall=2 success=yes exit=18 a0=5622386b3f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=8885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685349.621:4258213): proctitle="dovecot/auth"
type=AVC msg=audit(1674685349.621:4258214): avc: denied { getattr } for pid=8885 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685349.621:4258214): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff6139a730 a2=7fff6139a730 a3=fffffc00 items=0 ppid=5547 pid=8885 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685349.621:4258214): proctitle="dovecot/auth"
type=AVC msg=audit(1674685350.183:4258215): avc: denied { name_connect } for pid=8885 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674685350.183:4258215): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff6139a520 a2=10 a3=7fff6139a51c items=0 ppid=5547 pid=8885 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685350.183:4258215): proctitle="dovecot/auth"
type=AVC msg=audit(1674685350.213:4258216): avc: denied { write } for pid=8915 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674685350.213:4258216): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff94053eb0 a2=6e a3=63d1aba6 items=0 ppid=5547 pid=8915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685350.213:4258216): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674685360.550:4258217): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674685360.550:4258217): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad6ac1dc010 items=0 ppid=8996 pid=9001 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685360.550:4258217): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E3234392E3130312E32002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=USER_ACCT msg=audit(1674685381.123:4258218): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685381.123:4258219): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685381.124:4258220): pid=9066 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258686 res=1
type=USER_START msg=audit(1674685381.143:4258221): pid=9066 uid=0 auid=1055 ses=258686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685381.144:4258222): pid=9066 uid=0 auid=1055 ses=258686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685381.406:4258223): pid=9066 uid=0 auid=1055 ses=258686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685381.408:4258224): pid=9066 uid=0 auid=1055 ses=258686 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674685414.976:4258225): avc: denied { name_connect } for pid=8885 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674685414.976:4258225): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff6139a520 a2=10 a3=7fff6139a51c items=0 ppid=5547 pid=8885 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685414.976:4258225): proctitle="dovecot/auth"
type=AVC msg=audit(1674685414.987:4258226): avc: denied { write } for pid=8915 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674685414.987:4258226): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff94053eb0 a2=6e a3=63d1abe6 items=0 ppid=5547 pid=8915 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685414.987:4258226): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674685425.626:4258227): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674685425.626:4258227): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b6134e3b010 items=0 ppid=9232 pid=9237 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685425.626:4258227): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E32372E36332E313634002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=CRYPTO_KEY_USER msg=audit(1674685428.387:4258228): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685428.387:4258229): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685428.387:4258230): pid=9247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9247 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685428.649:4258231): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=9247 suid=74 rport=60845 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.196.206.75 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685428.649:4258232): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=9247 suid=74 rport=60845 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.196.206.75 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685428.955:4258233): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9247 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685428.955:4258234): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685428.956:4258235): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685428.956:4258236): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9243 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674685428.956:4258237): pid=9243 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.196.206.75 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674685441.427:4258238): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685441.427:4258239): pid=9283 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685441.427:4258240): pid=9283 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258687 res=1
type=USER_START msg=audit(1674685441.446:4258241): pid=9283 uid=0 auid=1055 ses=258687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685441.448:4258242): pid=9283 uid=0 auid=1055 ses=258687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685441.675:4258243): pid=9283 uid=0 auid=1055 ses=258687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685441.677:4258244): pid=9283 uid=0 auid=1055 ses=258687 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685501.692:4258245): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685501.692:4258246): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685501.693:4258247): pid=9467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685501.693:4258248): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685501.693:4258249): pid=9467 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258688 res=1
type=LOGIN msg=audit(1674685501.693:4258250): pid=9469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258689 res=1
type=USER_ACCT msg=audit(1674685501.696:4258251): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685501.696:4258252): pid=9468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685501.696:4258253): pid=9468 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258690 res=1
type=USER_START msg=audit(1674685501.735:4258254): pid=9467 uid=0 auid=0 ses=258688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674685501.736:4258255): pid=9469 uid=0 auid=1055 ses=258689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674685501.737:4258256): pid=9468 uid=0 auid=0 ses=258690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685501.737:4258257): pid=9469 uid=0 auid=1055 ses=258689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685501.738:4258258): pid=9467 uid=0 auid=0 ses=258688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685501.738:4258259): pid=9468 uid=0 auid=0 ses=258690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685501.986:4258260): pid=9467 uid=0 auid=0 ses=258688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685501.990:4258261): pid=9467 uid=0 auid=0 ses=258688 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685502.075:4258262): pid=9469 uid=0 auid=1055 ses=258689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685502.077:4258263): pid=9469 uid=0 auid=1055 ses=258689 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685505.142:4258264): pid=9468 uid=0 auid=0 ses=258690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685505.145:4258265): pid=9468 uid=0 auid=0 ses=258690 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685561.161:4258266): pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685561.162:4258267): pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685561.162:4258268): pid=9671 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258691 res=1
type=USER_START msg=audit(1674685561.178:4258269): pid=9671 uid=0 auid=1055 ses=258691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685561.180:4258270): pid=9671 uid=0 auid=1055 ses=258691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685561.431:4258271): pid=9671 uid=0 auid=1055 ses=258691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685561.434:4258272): pid=9671 uid=0 auid=1055 ses=258691 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674685605.650:4258273): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685605.650:4258274): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685605.650:4258275): pid=9822 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9822 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685605.653:4258276): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=9822 suid=74 rport=50126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685605.653:4258277): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=9822 suid=74 rport=50126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=USER_AUTH msg=audit(1674685607.503:4258278): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=107.189.30.59 addr=107.189.30.59 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685609.230:4258279): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674685609.909:4258280): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9822 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685609.909:4258281): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=9822 suid=74 rport=50126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685609.911:4258282): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=9820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685609.911:4258283): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=9820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685609.911:4258284): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=9820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674685609.911:4258285): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=107.189.30.59 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674685621.450:4258286): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685621.450:4258287): pid=9869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685621.451:4258288): pid=9869 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258692 res=1
type=USER_START msg=audit(1674685621.468:4258289): pid=9869 uid=0 auid=1055 ses=258692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685621.469:4258290): pid=9869 uid=0 auid=1055 ses=258692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685621.700:4258291): pid=9869 uid=0 auid=1055 ses=258692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685621.701:4258292): pid=9869 uid=0 auid=1055 ses=258692 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674685622.087:4258293): avc: denied { read } for pid=9882 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674685622.087:4258293): avc: denied { open } for pid=9882 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685622.087:4258293): arch=c000003e syscall=2 success=yes exit=18 a0=55a60d81ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=9882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685622.087:4258293): proctitle="dovecot/auth"
type=AVC msg=audit(1674685622.087:4258294): avc: denied { getattr } for pid=9882 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685622.087:4258294): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc2c47a070 a2=7ffc2c47a070 a3=fffffc00 items=0 ppid=5547 pid=9882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685622.087:4258294): proctitle="dovecot/auth"
type=AVC msg=audit(1674685626.282:4258295): avc: denied { name_connect } for pid=9882 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674685626.282:4258295): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc2c479e60 a2=10 a3=7ffc2c479e5c items=0 ppid=5547 pid=9882 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685626.282:4258295): proctitle="dovecot/auth"
type=AVC msg=audit(1674685626.309:4258296): avc: denied { write } for pid=9898 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674685626.309:4258296): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffce5c0d8b0 a2=6e a3=63d1acba items=0 ppid=5547 pid=9898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685626.309:4258296): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674685627.446:4258297): avc: denied { read append } for pid=9900 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674685627.446:4258297): avc: denied { open } for pid=9900 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685627.446:4258297): arch=c000003e syscall=2 success=yes exit=8 a0=55da1160aa60 a1=402 a2=7ffc7db1d470 a3=7ffc7db1cee0 items=0 ppid=5547 pid=9900 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685627.446:4258297): proctitle="dovecot/imap"
type=AVC msg=audit(1674685627.447:4258298): avc: denied { getattr } for pid=9900 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685627.447:4258298): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc7db1d3d0 a2=7ffc7db1d3d0 a3=7ffc7db1ce20 items=0 ppid=5547 pid=9900 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685627.447:4258298): proctitle="dovecot/imap"
type=AVC msg=audit(1674685627.447:4258299): avc: denied { write } for pid=9900 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685627.447:4258299): arch=c000003e syscall=2 success=yes exit=10 a0=55da1160f960 a1=2 a2=7ffc7db1d170 a3=7ffc7db1cc20 items=0 ppid=5547 pid=9900 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685627.447:4258299): proctitle="dovecot/imap"
type=AVC msg=audit(1674685627.447:4258300): avc: denied { lock } for pid=9900 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685627.447:4258300): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc7db1d070 a3=63d1acbb items=0 ppid=5547 pid=9900 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685627.447:4258300): proctitle="dovecot/imap"
type=AVC msg=audit(1674685627.447:4258301): avc: denied { read } for pid=9900 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674685627.447:4258301): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55da116382f8 a2=90800 a3=0 items=0 ppid=5547 pid=9900 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685627.447:4258301): proctitle="dovecot/imap"
type=AVC msg=audit(1674685627.448:4258302): avc: denied { getattr } for pid=9900 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685627.448:4258302): arch=c000003e syscall=4 success=yes exit=0 a0=55da115faa60 a1=7ffc7db1d420 a2=7ffc7db1d420 a3=6f632e6f72676173 items=0 ppid=5547 pid=9900 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685627.448:4258302): proctitle="dovecot/imap"
type=AVC msg=audit(1674685630.537:4258303): avc: denied { write } for pid=9917 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674685630.537:4258303): arch=c000003e syscall=21 success=yes exit=0 a0=55701649c4c0 a1=2 a2=7b48 a3=7ffcd8c4f320 items=0 ppid=5547 pid=9917 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685630.537:4258303): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674685681.716:4258304): pid=10094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685681.716:4258305): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685681.716:4258306): pid=10094 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685681.716:4258307): pid=10093 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685681.717:4258308): pid=10094 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258693 res=1
type=LOGIN msg=audit(1674685681.717:4258309): pid=10093 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258694 res=1
type=USER_START msg=audit(1674685681.752:4258310): pid=10093 uid=0 auid=0 ses=258694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674685681.752:4258311): pid=10094 uid=0 auid=1055 ses=258693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685681.753:4258312): pid=10094 uid=0 auid=1055 ses=258693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685681.753:4258313): pid=10093 uid=0 auid=0 ses=258694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685681.800:4258314): pid=10093 uid=0 auid=0 ses=258694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685681.803:4258315): pid=10093 uid=0 auid=0 ses=258694 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685682.044:4258316): pid=10094 uid=0 auid=1055 ses=258693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685682.046:4258317): pid=10094 uid=0 auid=1055 ses=258693 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685741.059:4258318): pid=10280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685741.059:4258319): pid=10280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685741.059:4258320): pid=10280 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258695 res=1
type=USER_START msg=audit(1674685741.071:4258321): pid=10280 uid=0 auid=1055 ses=258695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685741.072:4258322): pid=10280 uid=0 auid=1055 ses=258695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685741.292:4258323): pid=10280 uid=0 auid=1055 ses=258695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685741.293:4258324): pid=10280 uid=0 auid=1055 ses=258695 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674685755.721:4258325): avc: denied { name_connect } for pid=9882 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674685755.721:4258325): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc2c479e60 a2=10 a3=7ffc2c479e5c items=0 ppid=5547 pid=9882 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685755.721:4258325): proctitle="dovecot/auth"
type=AVC msg=audit(1674685755.754:4258326): avc: denied { write } for pid=10375 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674685755.754:4258326): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd952978a0 a2=6e a3=63d1ad3b items=0 ppid=5547 pid=10375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685755.754:4258326): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674685801.311:4258327): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685801.311:4258328): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685801.311:4258329): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685801.311:4258330): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685801.311:4258331): pid=10571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685801.311:4258332): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685801.312:4258333): pid=10569 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258696 res=1
type=LOGIN msg=audit(1674685801.312:4258334): pid=10571 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258697 res=1
type=LOGIN msg=audit(1674685801.312:4258335): pid=10570 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258698 res=1
type=USER_START msg=audit(1674685801.355:4258336): pid=10570 uid=0 auid=0 ses=258698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674685801.355:4258337): pid=10571 uid=0 auid=1055 ses=258697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674685801.356:4258338): pid=10569 uid=0 auid=0 ses=258696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685801.357:4258339): pid=10571 uid=0 auid=1055 ses=258697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685801.357:4258340): pid=10570 uid=0 auid=0 ses=258698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685801.358:4258341): pid=10569 uid=0 auid=0 ses=258696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685801.387:4258342): pid=10569 uid=0 auid=0 ses=258696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685801.392:4258343): pid=10569 uid=0 auid=0 ses=258696 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685801.705:4258344): pid=10571 uid=0 auid=1055 ses=258697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685801.725:4258345): pid=10571 uid=0 auid=1055 ses=258697 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685804.688:4258346): pid=10570 uid=0 auid=0 ses=258698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685804.689:4258347): pid=10570 uid=0 auid=0 ses=258698 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.802:4258348): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.802:4258349): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.802:4258350): pid=10638 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10638 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.941:4258351): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.941:4258352): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.941:4258353): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10651 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.943:4258354): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.944:4258355): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.944:4258356): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10650 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.945:4258357): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.946:4258358): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.946:4258359): pid=10654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10654 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.953:4258360): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10656 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.953:4258361): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10656 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.953:4258362): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10656 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.956:4258363): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10664 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.956:4258364): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10664 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.956:4258365): pid=10664 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10664 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.960:4258366): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.960:4258367): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.960:4258368): pid=10661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10661 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.973:4258369): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.974:4258370): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.974:4258371): pid=10666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.974:4258372): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.974:4258373): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.974:4258374): pid=10667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.977:4258375): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.977:4258376): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.977:4258377): pid=10670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.979:4258378): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.979:4258379): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.979:4258380): pid=10672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10672 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.980:4258381): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.980:4258382): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.980:4258383): pid=10668 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10668 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.981:4258384): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.981:4258385): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.982:4258386): pid=10665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10665 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.987:4258387): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.987:4258388): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.987:4258389): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10673 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.987:4258390): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.987:4258391): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.987:4258392): pid=10671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.989:4258393): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.989:4258394): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.989:4258395): pid=10678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10678 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.992:4258396): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.992:4258397): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.992:4258398): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.992:4258399): pid=10676 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10676 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.992:4258400): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.992:4258401): pid=10679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10679 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.994:4258402): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.994:4258403): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.994:4258404): pid=10677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10677 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.996:4258405): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.996:4258406): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.996:4258407): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.996:4258408): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10680 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.997:4258409): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.997:4258410): pid=10681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10681 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.997:4258411): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.997:4258412): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.998:4258413): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10683 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.998:4258414): pid=10682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.999:4258415): pid=10682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.999:4258416): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.999:4258417): pid=10682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10682 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.999:4258418): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685818.999:4258419): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10684 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685819.040:4258420): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=10686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685819.040:4258421): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=10686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674685819.040:4258422): pid=10686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=10686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.089:4258423): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10650 suid=74 rport=32962 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.089:4258424): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10650 suid=74 rport=32962 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.093:4258425): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10651 suid=74 rport=32994 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.093:4258426): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10651 suid=74 rport=32994 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.094:4258427): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10654 suid=74 rport=32856 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.094:4258428): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10654 suid=74 rport=32856 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.098:4258429): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10656 suid=74 rport=33042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.098:4258430): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10656 suid=74 rport=33042 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.111:4258431): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10664 suid=74 rport=32860 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.111:4258432): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10664 suid=74 rport=32860 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.123:4258433): pid=10646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10661 suid=74 rport=32880 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.123:4258434): pid=10646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10661 suid=74 rport=32880 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.131:4258435): pid=10645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10670 suid=74 rport=32956 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.131:4258436): pid=10645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10670 suid=74 rport=32956 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.132:4258437): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10665 suid=74 rport=32840 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.132:4258438): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10665 suid=74 rport=32840 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.132:4258439): pid=10642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10666 suid=74 rport=32948 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.132:4258440): pid=10642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10666 suid=74 rport=32948 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.137:4258441): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10668 suid=74 rport=33082 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.137:4258442): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10667 suid=74 rport=33118 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.137:4258443): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10667 suid=74 rport=33118 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.137:4258444): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10668 suid=74 rport=33082 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.143:4258445): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10671 suid=74 rport=33144 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.143:4258446): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10671 suid=74 rport=33144 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.152:4258447): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10672 suid=74 rport=32946 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.152:4258448): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10672 suid=74 rport=32946 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.157:4258449): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10673 suid=74 rport=32998 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.157:4258450): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10673 suid=74 rport=32998 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.164:4258451): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10676 suid=74 rport=33072 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.164:4258452): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10676 suid=74 rport=33072 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.165:4258453): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10679 suid=74 rport=32944 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.165:4258454): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10679 suid=74 rport=32944 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.168:4258455): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10678 suid=74 rport=32932 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.168:4258456): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10678 suid=74 rport=32932 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.169:4258457): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10677 suid=74 rport=32970 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.169:4258458): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10677 suid=74 rport=32970 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.176:4258459): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10682 suid=74 rport=32968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.176:4258460): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10682 suid=74 rport=32968 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.179:4258461): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10680 suid=74 rport=33116 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.179:4258462): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10680 suid=74 rport=33116 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.189:4258463): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10681 suid=74 rport=32900 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.189:4258464): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10681 suid=74 rport=32900 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.194:4258465): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10683 suid=74 rport=33008 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.194:4258466): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10683 suid=74 rport=33008 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.201:4258467): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10684 suid=74 rport=33098 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.201:4258468): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10684 suid=74 rport=33098 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.269:4258469): pid=10685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10686 suid=74 rport=33070 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674685819.269:4258470): pid=10685 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=10686 suid=74 rport=33070 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=? res=success'
type=USER_AUTH msg=audit(1674685819.738:4258471): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.744:4258472): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.755:4258473): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.755:4258474): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.757:4258475): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.771:4258476): pid=10642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.782:4258477): pid=10646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.784:4258478): pid=10645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.807:4258479): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.813:4258480): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.817:4258481): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.822:4258482): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674685819.858:4258483): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674685819.858:4258483): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2de9eba010 items=0 ppid=10694 pid=10697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685819.858:4258483): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=USER_AUTH msg=audit(1674685819.858:4258484): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674685819.861:4258485): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674685819.861:4258485): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdf82657010 items=0 ppid=10694 pid=10698 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685819.861:4258485): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674685819.865:4258486): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674685819.865:4258486): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5537d49010 items=0 ppid=10694 pid=10699 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685819.865:4258486): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674685819.869:4258487): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674685819.869:4258487): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb437c42010 items=0 ppid=10694 pid=10700 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685819.869:4258487): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=USER_AUTH msg=audit(1674685819.874:4258488): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.878:4258489): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.908:4258490): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.912:4258491): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.933:4258492): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.940:4258493): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.947:4258494): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685819.989:4258495): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685820.000:4258496): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685820.018:4258497): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=89.108.115.105 addr=89.108.115.105 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674685820.170:4258498): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674685820.170:4258498): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7faedf802010 items=0 ppid=10694 pid=10711 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685820.170:4258498): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003231302E3130302E3235342E323034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685820.175:4258499): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674685820.175:4258499): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0b700ac010 items=0 ppid=10694 pid=10712 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685820.175:4258499): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003231302E3130302E3235342E323034002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674685820.181:4258500): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674685820.181:4258500): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f063eea3010 items=0 ppid=10694 pid=10713 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685820.181:4258500): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038392E3130382E3131352E313035002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674685820.186:4258501): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674685820.186:4258501): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff5e5537010 items=0 ppid=10694 pid=10714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685820.186:4258501): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038392E3130382E3131352E313035002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674685821.234:4258502): pid=10639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.240:4258503): pid=10641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.250:4258505): pid=10644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.250:4258504): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.252:4258506): pid=10640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.266:4258507): pid=10642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.278:4258508): pid=10646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.279:4258509): pid=10645 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.302:4258510): pid=10648 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.308:4258511): pid=10647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.312:4258512): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.317:4258513): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.354:4258514): pid=10652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.370:4258515): pid=10653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.373:4258516): pid=10658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.404:4258517): pid=10660 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.407:4258518): pid=10663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.429:4258519): pid=10659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.435:4258520): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.441:4258521): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.485:4258522): pid=10674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.495:4258523): pid=10669 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674685821.985:4258524): pid=10675 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=89.108.115.105 terminal=ssh res=failed'
type=AVC msg=audit(1674685824.455:4258525): avc: denied { name_connect } for pid=9882 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674685824.455:4258525): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc2c479e60 a2=10 a3=7ffc2c479e5c items=0 ppid=5547 pid=9882 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685824.455:4258525): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674685850.199:4258526): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674685850.199:4258526): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b54a2649010 items=0 ppid=10817 pid=10822 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685850.199:4258526): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034322E3233362E37352E323136002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=AVC msg=audit(1674685856.806:4258527): avc: denied { write } for pid=10850 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674685856.806:4258527): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd79a00d90 a2=6e a3=63d1ada0 items=0 ppid=5547 pid=10850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685856.806:4258527): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674685861.709:4258528): pid=10873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685861.709:4258529): pid=10873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685861.711:4258530): pid=10873 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258699 res=1
type=USER_START msg=audit(1674685861.735:4258531): pid=10873 uid=0 auid=1055 ses=258699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685861.736:4258532): pid=10873 uid=0 auid=1055 ses=258699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685862.048:4258533): pid=10873 uid=0 auid=1055 ses=258699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685862.050:4258534): pid=10873 uid=0 auid=1055 ses=258699 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674685921.064:4258535): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685921.064:4258536): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685921.064:4258537): pid=11057 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258700 res=1
type=USER_START msg=audit(1674685921.078:4258538): pid=11057 uid=0 auid=1055 ses=258700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685921.080:4258539): pid=11057 uid=0 auid=1055 ses=258700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685921.304:4258540): pid=11057 uid=0 auid=1055 ses=258700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685921.306:4258541): pid=11057 uid=0 auid=1055 ses=258700 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674685940.839:4258542): avc: denied { read } for pid=11121 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674685940.839:4258542): avc: denied { open } for pid=11121 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685940.839:4258542): arch=c000003e syscall=2 success=yes exit=18 a0=55e65eb61f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=11121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685940.839:4258542): proctitle="dovecot/auth"
type=AVC msg=audit(1674685940.840:4258543): avc: denied { getattr } for pid=11121 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674685940.840:4258543): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdd7fc2b10 a2=7ffdd7fc2b10 a3=fffffc00 items=0 ppid=5547 pid=11121 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685940.840:4258543): proctitle="dovecot/auth"
type=AVC msg=audit(1674685943.096:4258544): avc: denied { name_connect } for pid=11121 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674685943.096:4258544): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdd7fc2900 a2=10 a3=7ffdd7fc28fc items=0 ppid=5547 pid=11121 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685943.096:4258544): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674685944.183:4258545): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674685944.183:4258545): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b08a2d3e010 items=0 ppid=11132 pid=11137 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685944.183:4258545): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3134392E3234362E313033002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=AVC msg=audit(1674685952.498:4258546): avc: denied { write } for pid=11186 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674685952.498:4258546): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd01152180 a2=6e a3=63d1ae00 items=0 ppid=5547 pid=11186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674685952.498:4258546): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674685981.319:4258547): pid=11265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674685981.319:4258548): pid=11265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674685981.320:4258549): pid=11265 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258701 res=1
type=USER_START msg=audit(1674685981.332:4258550): pid=11265 uid=0 auid=1055 ses=258701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674685981.332:4258551): pid=11265 uid=0 auid=1055 ses=258701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674685981.564:4258552): pid=11265 uid=0 auid=1055 ses=258701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674685981.565:4258553): pid=11265 uid=0 auid=1055 ses=258701 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686041.579:4258554): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686041.579:4258555): pid=11459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686041.580:4258556): pid=11459 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258702 res=1
type=USER_START msg=audit(1674686041.590:4258557): pid=11459 uid=0 auid=1055 ses=258702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686041.591:4258558): pid=11459 uid=0 auid=1055 ses=258702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686041.825:4258559): pid=11459 uid=0 auid=1055 ses=258702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686041.827:4258560): pid=11459 uid=0 auid=1055 ses=258702 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674686069.373:4258561): avc: denied { write } for pid=11605 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674686069.373:4258561): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd035e0a10 a2=6e a3=63d1ae75 items=0 ppid=5547 pid=11605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686069.373:4258561): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674686101.846:4258562): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686101.846:4258563): pid=11745 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686101.846:4258564): pid=11745 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258703 res=1
type=USER_ACCT msg=audit(1674686101.864:4258565): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686101.864:4258566): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686101.864:4258567): pid=11746 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258704 res=1
type=USER_ACCT msg=audit(1674686101.864:4258568): pid=11749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686101.864:4258569): pid=11749 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686101.864:4258570): pid=11749 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258705 res=1
type=USER_ACCT msg=audit(1674686101.866:4258571): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686101.866:4258572): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686101.866:4258573): pid=11748 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258706 res=1
type=USER_START msg=audit(1674686101.970:4258574): pid=11745 uid=0 auid=0 ses=258703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674686101.971:4258575): pid=11749 uid=0 auid=1055 ses=258705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674686101.971:4258576): pid=11746 uid=0 auid=0 ses=258704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674686101.971:4258577): pid=11748 uid=0 auid=0 ses=258706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686101.972:4258578): pid=11749 uid=0 auid=1055 ses=258705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686101.981:4258579): pid=11748 uid=0 auid=0 ses=258706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686101.981:4258580): pid=11746 uid=0 auid=0 ses=258704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686101.987:4258581): pid=11745 uid=0 auid=0 ses=258703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686102.114:4258582): pid=11746 uid=0 auid=0 ses=258704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686102.128:4258583): pid=11746 uid=0 auid=0 ses=258704 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686102.155:4258584): pid=11748 uid=0 auid=0 ses=258706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686102.158:4258585): pid=11748 uid=0 auid=0 ses=258706 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686102.338:4258586): pid=11749 uid=0 auid=1055 ses=258705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686102.340:4258587): pid=11749 uid=0 auid=1055 ses=258705 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686105.409:4258588): pid=11745 uid=0 auid=0 ses=258703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686105.410:4258589): pid=11745 uid=0 auid=0 ses=258703 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686161.427:4258590): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686161.427:4258591): pid=11961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686161.428:4258592): pid=11961 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258707 res=1
type=USER_START msg=audit(1674686161.443:4258593): pid=11961 uid=0 auid=1055 ses=258707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686161.445:4258594): pid=11961 uid=0 auid=1055 ses=258707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686161.678:4258595): pid=11961 uid=0 auid=1055 ses=258707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686161.681:4258596): pid=11961 uid=0 auid=1055 ses=258707 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686221.694:4258597): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686221.694:4258598): pid=12153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686221.694:4258599): pid=12153 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258708 res=1
type=USER_START msg=audit(1674686221.705:4258600): pid=12153 uid=0 auid=1055 ses=258708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686221.705:4258601): pid=12153 uid=0 auid=1055 ses=258708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686221.945:4258602): pid=12153 uid=0 auid=1055 ses=258708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686221.947:4258603): pid=12153 uid=0 auid=1055 ses=258708 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686281.962:4258604): pid=12366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686281.963:4258605): pid=12366 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686281.963:4258606): pid=12366 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258709 res=1
type=USER_START msg=audit(1674686281.975:4258607): pid=12366 uid=0 auid=1055 ses=258709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686281.977:4258608): pid=12366 uid=0 auid=1055 ses=258709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686282.200:4258609): pid=12366 uid=0 auid=1055 ses=258709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686282.202:4258610): pid=12366 uid=0 auid=1055 ses=258709 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674686315.609:4258611): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686315.609:4258612): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686315.609:4258613): pid=12482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12482 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686315.683:4258614): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=12482 suid=74 rport=59608 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686315.683:4258615): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=12482 suid=74 rport=59608 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=USER_AUTH msg=audit(1674686316.077:4258616): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.152.237.118 addr=59.152.237.118 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686318.802:4258617): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674686318.878:4258618): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12482 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686318.878:4258619): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12482 suid=74 rport=59608 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686318.879:4258620): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686318.879:4258621): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686318.879:4258622): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674686318.879:4258623): pid=12481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674686341.217:4258625): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686341.217:4258624): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686341.217:4258626): pid=12552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686341.217:4258627): pid=12553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686341.217:4258628): pid=12552 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258710 res=1
type=LOGIN msg=audit(1674686341.217:4258629): pid=12553 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258711 res=1
type=USER_START msg=audit(1674686341.257:4258630): pid=12553 uid=0 auid=1055 ses=258711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674686341.258:4258631): pid=12552 uid=0 auid=0 ses=258710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686341.259:4258632): pid=12553 uid=0 auid=1055 ses=258711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686341.259:4258633): pid=12552 uid=0 auid=0 ses=258710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686341.555:4258634): pid=12553 uid=0 auid=1055 ses=258711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686341.557:4258635): pid=12553 uid=0 auid=1055 ses=258711 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686342.528:4258636): pid=12552 uid=0 auid=0 ses=258710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686342.530:4258637): pid=12552 uid=0 auid=0 ses=258710 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674686364.751:4258638): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686364.751:4258639): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686364.751:4258640): pid=12639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12639 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686364.905:4258641): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=12639 suid=74 rport=46284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686364.906:4258642): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=12639 suid=74 rport=46284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674686365.698:4258643): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686367.820:4258644): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674686368.152:4258645): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12639 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686368.152:4258646): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=12639 suid=74 rport=46284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686368.153:4258647): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=12635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686368.153:4258648): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=12635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686368.154:4258649): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=12635 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674686368.154:4258650): pid=12635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674686401.547:4258651): pid=12759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686401.547:4258652): pid=12759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686401.547:4258654): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686401.547:4258653): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686401.547:4258656): pid=12761 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686401.547:4258655): pid=12758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686401.548:4258657): pid=12759 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258712 res=1
type=LOGIN msg=audit(1674686401.548:4258658): pid=12758 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258714 res=1
type=LOGIN msg=audit(1674686401.548:4258659): pid=12761 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258713 res=1
type=USER_START msg=audit(1674686401.595:4258660): pid=12759 uid=0 auid=0 ses=258712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674686401.595:4258661): pid=12761 uid=0 auid=1055 ses=258713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674686401.595:4258662): pid=12758 uid=0 auid=0 ses=258714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686401.596:4258663): pid=12759 uid=0 auid=0 ses=258712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686401.596:4258664): pid=12758 uid=0 auid=0 ses=258714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686401.597:4258665): pid=12761 uid=0 auid=1055 ses=258713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686401.625:4258666): pid=12758 uid=0 auid=0 ses=258714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686401.628:4258667): pid=12758 uid=0 auid=0 ses=258714 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686401.954:4258668): pid=12761 uid=0 auid=1055 ses=258713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686401.959:4258669): pid=12761 uid=0 auid=1055 ses=258713 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686404.968:4258670): pid=12759 uid=0 auid=0 ses=258712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686404.971:4258671): pid=12759 uid=0 auid=0 ses=258712 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674686460.473:4258672): avc: denied { read } for pid=12993 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674686460.473:4258672): avc: denied { open } for pid=12993 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686460.473:4258672): arch=c000003e syscall=2 success=yes exit=18 a0=55d12b8daf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=12993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686460.473:4258672): proctitle="dovecot/auth"
type=AVC msg=audit(1674686460.474:4258673): avc: denied { getattr } for pid=12993 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686460.474:4258673): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd37b28370 a2=7ffd37b28370 a3=fffffc00 items=0 ppid=5547 pid=12993 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686460.474:4258673): proctitle="dovecot/auth"
type=AVC msg=audit(1674686461.057:4258674): avc: denied { name_connect } for pid=12993 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674686461.057:4258674): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd37b28160 a2=10 a3=7ffd37b2815c items=0 ppid=5547 pid=12993 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686461.057:4258674): proctitle="dovecot/auth"
type=AVC msg=audit(1674686461.099:4258675): avc: denied { write } for pid=13023 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674686461.099:4258675): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff4ff2a570 a2=6e a3=63d1affd items=0 ppid=5547 pid=13023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686461.099:4258675): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674686461.995:4258676): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686461.995:4258677): pid=13042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686461.996:4258678): pid=13042 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258715 res=1
type=USER_START msg=audit(1674686462.017:4258679): pid=13042 uid=0 auid=1055 ses=258715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686462.019:4258680): pid=13042 uid=0 auid=1055 ses=258715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686462.293:4258681): pid=13042 uid=0 auid=1055 ses=258715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686462.294:4258682): pid=13042 uid=0 auid=1055 ses=258715 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674686463.406:4258683): avc: denied { write } for pid=13023 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674686463.406:4258683): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff4ff2a570 a2=6e a3=63d1afff items=0 ppid=5547 pid=13023 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686463.406:4258683): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674686479.082:4258684): avc: denied { name_connect } for pid=12993 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674686479.082:4258684): arch=c000003e syscall=42 success=no exit=-115 a0=18 a1=7ffd37b28160 a2=10 a3=7ffd37b2815c items=0 ppid=5547 pid=12993 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686479.082:4258684): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674686521.310:4258685): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686521.310:4258686): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686521.310:4258687): pid=13265 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258716 res=1
type=USER_START msg=audit(1674686521.327:4258688): pid=13265 uid=0 auid=1055 ses=258716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686521.330:4258689): pid=13265 uid=0 auid=1055 ses=258716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686521.593:4258690): pid=13265 uid=0 auid=1055 ses=258716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686521.595:4258691): pid=13265 uid=0 auid=1055 ses=258716 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674686547.323:4258692): pid=13358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686547.324:4258693): pid=13358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686547.324:4258694): pid=13358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13358 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686547.399:4258695): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=13358 suid=74 rport=44692 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686547.399:4258696): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=13358 suid=74 rport=44692 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=USER_AUTH msg=audit(1674686547.809:4258697): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.152.237.118 addr=59.152.237.118 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686549.916:4258698): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674686549.995:4258699): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13358 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686549.995:4258700): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13358 suid=74 rport=44692 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686549.996:4258701): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686549.996:4258702): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686549.996:4258703): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13357 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674686549.996:4258704): pid=13357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674686581.611:4258705): pid=13459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686581.611:4258706): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686581.611:4258707): pid=13459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686581.612:4258708): pid=13460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686581.613:4258709): pid=13459 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258717 res=1
type=LOGIN msg=audit(1674686581.613:4258710): pid=13460 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258718 res=1
type=USER_START msg=audit(1674686581.645:4258711): pid=13459 uid=0 auid=0 ses=258717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674686581.645:4258712): pid=13460 uid=0 auid=1055 ses=258718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686581.647:4258713): pid=13459 uid=0 auid=0 ses=258717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686581.647:4258714): pid=13460 uid=0 auid=1055 ses=258718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686581.715:4258715): pid=13459 uid=0 auid=0 ses=258717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686581.716:4258716): pid=13459 uid=0 auid=0 ses=258717 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686581.912:4258717): pid=13460 uid=0 auid=1055 ses=258718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686581.913:4258718): pid=13460 uid=0 auid=1055 ses=258718 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674686601.480:4258719): avc: denied { read } for pid=13530 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674686601.480:4258719): avc: denied { open } for pid=13530 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686601.480:4258719): arch=c000003e syscall=2 success=yes exit=18 a0=56342225ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=13530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686601.480:4258719): proctitle="dovecot/auth"
type=AVC msg=audit(1674686601.480:4258720): avc: denied { getattr } for pid=13530 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686601.480:4258720): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc247e3ab0 a2=7ffc247e3ab0 a3=fffffc00 items=0 ppid=5547 pid=13530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686601.480:4258720): proctitle="dovecot/auth"
type=AVC msg=audit(1674686607.350:4258721): avc: denied { read append } for pid=13572 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674686607.350:4258721): avc: denied { open } for pid=13572 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686607.350:4258721): arch=c000003e syscall=2 success=yes exit=8 a0=55e41774ea60 a1=402 a2=7fff228944a0 a3=7fff22893f20 items=0 ppid=5547 pid=13572 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686607.350:4258721): proctitle="dovecot/imap"
type=AVC msg=audit(1674686607.350:4258722): avc: denied { getattr } for pid=13572 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686607.350:4258722): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff22894400 a2=7fff22894400 a3=7fff22893e60 items=0 ppid=5547 pid=13572 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686607.350:4258722): proctitle="dovecot/imap"
type=AVC msg=audit(1674686607.350:4258723): avc: denied { write } for pid=13572 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686607.350:4258723): arch=c000003e syscall=2 success=yes exit=10 a0=55e417753990 a1=2 a2=7fff228941a0 a3=7fff22893c60 items=0 ppid=5547 pid=13572 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686607.350:4258723): proctitle="dovecot/imap"
type=AVC msg=audit(1674686607.351:4258724): avc: denied { lock } for pid=13572 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686607.351:4258724): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff228940a0 a3=63d1b08f items=0 ppid=5547 pid=13572 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686607.351:4258724): proctitle="dovecot/imap"
type=AVC msg=audit(1674686607.351:4258725): avc: denied { read } for pid=13572 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674686607.351:4258725): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55e41777c300 a2=90800 a3=0 items=0 ppid=5547 pid=13572 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686607.351:4258725): proctitle="dovecot/imap"
type=AVC msg=audit(1674686607.351:4258726): avc: denied { getattr } for pid=13572 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674686607.351:4258726): arch=c000003e syscall=4 success=yes exit=0 a0=55e41773ea60 a1=7fff22894450 a2=7fff22894450 a3=6f632e6f72676173 items=0 ppid=5547 pid=13572 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686607.351:4258726): proctitle="dovecot/imap"
type=AVC msg=audit(1674686608.962:4258727): avc: denied { write } for pid=13581 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674686608.962:4258727): arch=c000003e syscall=21 success=yes exit=0 a0=56470300f4c0 a1=2 a2=7b48 a3=7ffc3490a160 items=0 ppid=5547 pid=13581 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686608.962:4258727): proctitle="dovecot/imap"
type=AVC msg=audit(1674686609.726:4258728): avc: denied { write } for pid=13537 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674686609.726:4258728): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe36e936d0 a2=6e a3=63d1b091 items=0 ppid=5547 pid=13537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686609.726:4258728): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674686629.887:4258729): pid=13644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686629.887:4258730): pid=13644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686629.887:4258731): pid=13644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686629.961:4258732): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=13644 suid=74 rport=43004 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686629.961:4258733): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=13644 suid=74 rport=43004 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=USER_AUTH msg=audit(1674686630.354:4258734): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.152.237.118 addr=59.152.237.118 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686632.522:4258735): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674686632.598:4258736): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13644 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686632.598:4258737): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=13644 suid=74 rport=43004 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686632.599:4258738): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=13643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686632.599:4258739): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=13643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686632.599:4258740): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=13643 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674686632.599:4258741): pid=13643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.152.237.118 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674686635.294:4258742): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674686635.294:4258742): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f38c13da010 items=0 ppid=13661 pid=13664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686635.294:4258742): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674686635.297:4258743): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674686635.297:4258743): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0177d1b010 items=0 ppid=13661 pid=13665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686635.297:4258743): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674686635.302:4258744): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674686635.302:4258744): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2e611e7010 items=0 ppid=13661 pid=13666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686635.302:4258744): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674686635.307:4258745): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674686635.307:4258745): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff126723010 items=0 ppid=13661 pid=13667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686635.307:4258745): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674686635.633:4258746): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674686635.633:4258746): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f666b837010 items=0 ppid=13661 pid=13678 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686635.633:4258746): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003130342E35392E3135312E313435002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674686635.638:4258747): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674686635.638:4258747): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb64fc6f010 items=0 ppid=13661 pid=13679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686635.638:4258747): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003130342E35392E3135312E313435002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674686635.643:4258748): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674686635.643:4258748): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1acc35c010 items=0 ppid=13661 pid=13680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686635.643:4258748): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035392E3135322E3233372E313138002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674686635.648:4258749): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674686635.648:4258749): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcddd96b010 items=0 ppid=13661 pid=13681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686635.648:4258749): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035392E3135322E3233372E313138002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674686641.931:4258750): pid=13708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686641.931:4258751): pid=13708 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686641.931:4258752): pid=13708 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258719 res=1
type=USER_START msg=audit(1674686641.950:4258753): pid=13708 uid=0 auid=1055 ses=258719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686641.953:4258754): pid=13708 uid=0 auid=1055 ses=258719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686642.309:4258755): pid=13708 uid=0 auid=1055 ses=258719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686642.311:4258756): pid=13708 uid=0 auid=1055 ses=258719 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686701.327:4258757): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686701.327:4258758): pid=13898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686701.327:4258759): pid=13899 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686701.327:4258760): pid=13898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686701.329:4258761): pid=13899 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258720 res=1
type=LOGIN msg=audit(1674686701.329:4258762): pid=13898 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258721 res=1
type=USER_START msg=audit(1674686701.366:4258763): pid=13898 uid=0 auid=0 ses=258721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674686701.367:4258764): pid=13899 uid=0 auid=1055 ses=258720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686701.368:4258765): pid=13899 uid=0 auid=1055 ses=258720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686701.368:4258766): pid=13898 uid=0 auid=0 ses=258721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686701.680:4258767): pid=13899 uid=0 auid=1055 ses=258720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686701.684:4258768): pid=13899 uid=0 auid=1055 ses=258720 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686704.744:4258769): pid=13898 uid=0 auid=0 ses=258721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686704.746:4258770): pid=13898 uid=0 auid=0 ses=258721 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674686761.226:4258771): avc: denied { name_connect } for pid=13530 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674686761.226:4258771): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc247e38a0 a2=10 a3=7ffc247e389c items=0 ppid=5547 pid=13530 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686761.226:4258771): proctitle="dovecot/auth"
type=AVC msg=audit(1674686761.262:4258772): avc: denied { write } for pid=14159 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674686761.262:4258772): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd38a4e040 a2=6e a3=63d1b129 items=0 ppid=5547 pid=14159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686761.262:4258772): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674686761.766:4258773): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686761.766:4258774): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686761.766:4258775): pid=14172 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258722 res=1
type=USER_START msg=audit(1674686761.781:4258776): pid=14172 uid=0 auid=1055 ses=258722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686761.784:4258777): pid=14172 uid=0 auid=1055 ses=258722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686762.041:4258778): pid=14172 uid=0 auid=1055 ses=258722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686762.043:4258779): pid=14172 uid=0 auid=1055 ses=258722 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674686821.058:4258780): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686821.058:4258781): pid=14415 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686821.059:4258782): pid=14415 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258723 res=1
type=USER_START msg=audit(1674686821.073:4258783): pid=14415 uid=0 auid=1055 ses=258723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686821.074:4258784): pid=14415 uid=0 auid=1055 ses=258723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686821.317:4258785): pid=14415 uid=0 auid=1055 ses=258723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686821.319:4258786): pid=14415 uid=0 auid=1055 ses=258723 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674686834.707:4258787): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686834.708:4258788): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686834.708:4258789): pid=14490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14490 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686834.825:4258790): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=14490 suid=74 rport=49000 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686834.825:4258791): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=14490 suid=74 rport=49000 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=? res=success'
type=USER_AUTH msg=audit(1674686835.464:4258792): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=121.184.138.195 addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686837.441:4258793): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686837.718:4258794): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=121.184.138.195 addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686839.635:4258795): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686839.901:4258796): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=121.184.138.195 addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686841.762:4258797): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686842.029:4258798): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=121.184.138.195 addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686843.635:4258799): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686843.900:4258800): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=121.184.138.195 addr=121.184.138.195 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674686845.583:4258801): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674686845.583:4258801): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f934c11c010 items=0 ppid=14524 pid=14528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686845.583:4258801): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674686845.588:4258802): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674686845.588:4258802): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f440bdcc010 items=0 ppid=14524 pid=14529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686845.588:4258802): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674686845.592:4258803): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674686845.592:4258803): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe24323d010 items=0 ppid=14524 pid=14530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686845.592:4258803): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674686845.596:4258804): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674686845.596:4258804): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6127359010 items=0 ppid=14524 pid=14531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686845.596:4258804): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=USER_AUTH msg=audit(1674686845.641:4258805): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674686845.894:4258806): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674686845.894:4258806): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f00b87a3010 items=0 ppid=14524 pid=14562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686845.894:4258806): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D7300352E35312E38342E313037002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674686845.901:4258807): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674686845.901:4258807): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f828ac1b010 items=0 ppid=14524 pid=14563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686845.901:4258807): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D6400352E35312E38342E313037002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674686845.907:4258808): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674686845.907:4258808): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9034c77010 items=0 ppid=14524 pid=14564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686845.907:4258808): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003132312E3138342E3133382E313935002D6A0044524F50
type=USER_AUTH msg=audit(1674686845.912:4258809): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=121.184.138.195 addr=121.184.138.195 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674686845.915:4258810): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674686845.915:4258810): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0bef903010 items=0 ppid=14524 pid=14565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674686845.915:4258810): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003132312E3138342E3133382E313935002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674686847.929:4258811): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686847.930:4258812): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=maxtries exceeded acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674686847.930:4258813): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14490 suid=74 rport=49000 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686847.931:4258814): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14490 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686847.931:4258815): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686847.931:4258816): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686847.931:4258817): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14489 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674686847.932:4258818): pid=14489 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=121.184.138.195 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674686881.334:4258819): pid=14681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686881.334:4258820): pid=14681 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686881.335:4258821): pid=14681 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258724 res=1
type=USER_START msg=audit(1674686881.350:4258822): pid=14681 uid=0 auid=1055 ses=258724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686881.353:4258823): pid=14681 uid=0 auid=1055 ses=258724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686881.574:4258824): pid=14681 uid=0 auid=1055 ses=258724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686881.575:4258825): pid=14681 uid=0 auid=1055 ses=258724 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674686923.882:4258826): pid=14821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686923.882:4258827): pid=14821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686923.882:4258828): pid=14821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14821 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686924.104:4258829): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=14821 suid=74 rport=53052 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.220.56 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674686924.104:4258830): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=14821 suid=74 rport=53052 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.220.56 terminal=? res=success'
type=USER_AUTH msg=audit(1674686925.143:4258831): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.126.220.56 addr=59.126.220.56 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686927.140:4258832): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.220.56 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686927.595:4258833): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=59.126.220.56 addr=59.126.220.56 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686929.536:4258834): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.220.56 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674686930.596:4258835): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.220.56 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674686930.861:4258836): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14821 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686930.861:4258837): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=14821 suid=74 rport=53052 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=59.126.220.56 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686930.863:4258838): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=14820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686930.863:4258839): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=14820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674686930.863:4258840): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=14820 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674686930.863:4258841): pid=14820 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=59.126.220.56 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674686941.593:4258842): pid=14871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674686941.593:4258843): pid=14871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674686941.594:4258844): pid=14871 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258725 res=1
type=USER_START msg=audit(1674686941.611:4258845): pid=14871 uid=0 auid=1055 ses=258725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674686941.612:4258846): pid=14871 uid=0 auid=1055 ses=258725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674686941.906:4258847): pid=14871 uid=0 auid=1055 ses=258725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674686941.908:4258848): pid=14871 uid=0 auid=1055 ses=258725 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687001.917:4258850): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687001.917:4258849): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687001.927:4258851): pid=15061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687001.927:4258852): pid=15061 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258726 res=1
type=CRED_ACQ msg=audit(1674687001.936:4258853): pid=15062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687001.939:4258854): pid=15062 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258727 res=1
type=USER_ACCT msg=audit(1674687001.939:4258855): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687001.939:4258856): pid=15060 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687001.939:4258857): pid=15059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687001.940:4258858): pid=15060 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258728 res=1
type=CRED_ACQ msg=audit(1674687001.940:4258859): pid=15059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687001.940:4258860): pid=15059 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258729 res=1
type=USER_START msg=audit(1674687002.013:4258861): pid=15061 uid=0 auid=0 ses=258726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687002.014:4258862): pid=15059 uid=0 auid=0 ses=258729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687002.014:4258863): pid=15061 uid=0 auid=0 ses=258726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687002.015:4258864): pid=15060 uid=0 auid=0 ses=258728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687002.016:4258865): pid=15062 uid=0 auid=1055 ses=258727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687002.018:4258866): pid=15060 uid=0 auid=0 ses=258728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687002.022:4258867): pid=15059 uid=0 auid=0 ses=258729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687002.029:4258868): pid=15062 uid=0 auid=1055 ses=258727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687002.075:4258869): pid=15059 uid=0 auid=0 ses=258729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687002.096:4258870): pid=15059 uid=0 auid=0 ses=258729 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687002.128:4258871): pid=15061 uid=0 auid=0 ses=258726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687002.132:4258872): pid=15061 uid=0 auid=0 ses=258726 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687002.320:4258873): pid=15062 uid=0 auid=1055 ses=258727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687002.322:4258874): pid=15062 uid=0 auid=1055 ses=258727 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687005.390:4258875): pid=15060 uid=0 auid=0 ses=258728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687005.392:4258876): pid=15060 uid=0 auid=0 ses=258728 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687061.410:4258877): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687061.411:4258878): pid=15311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687061.412:4258879): pid=15311 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258730 res=1
type=USER_START msg=audit(1674687061.429:4258880): pid=15311 uid=0 auid=1055 ses=258730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687061.430:4258881): pid=15311 uid=0 auid=1055 ses=258730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687061.788:4258882): pid=15311 uid=0 auid=1055 ses=258730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687061.789:4258883): pid=15311 uid=0 auid=1055 ses=258730 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687100.443:4258884): avc: denied { read } for pid=15459 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674687100.443:4258884): avc: denied { open } for pid=15459 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687100.443:4258884): arch=c000003e syscall=2 success=yes exit=18 a0=560695507f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=15459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687100.443:4258884): proctitle="dovecot/auth"
type=AVC msg=audit(1674687100.443:4258885): avc: denied { getattr } for pid=15459 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687100.443:4258885): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe8b8e08c0 a2=7ffe8b8e08c0 a3=fffffc00 items=0 ppid=5547 pid=15459 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687100.443:4258885): proctitle="dovecot/auth"
type=AVC msg=audit(1674687100.986:4258886): avc: denied { name_connect } for pid=15459 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674687100.986:4258886): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe8b8e06b0 a2=10 a3=7ffe8b8e06ac items=0 ppid=5547 pid=15459 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687100.986:4258886): proctitle="dovecot/auth"
type=AVC msg=audit(1674687101.015:4258887): avc: denied { write } for pid=15491 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674687101.015:4258887): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc670f0ee0 a2=6e a3=63d1b27d items=0 ppid=5547 pid=15491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687101.015:4258887): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674687116.790:4258888): avc: denied { name_connect } for pid=15459 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674687116.790:4258888): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe8b8e06b0 a2=10 a3=7ffe8b8e06ac items=0 ppid=5547 pid=15459 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687116.790:4258888): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674687121.808:4258889): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687121.808:4258890): pid=15601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687121.809:4258891): pid=15601 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258731 res=1
type=USER_START msg=audit(1674687121.829:4258892): pid=15601 uid=0 auid=1055 ses=258731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687121.832:4258893): pid=15601 uid=0 auid=1055 ses=258731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687122.253:4258894): pid=15601 uid=0 auid=1055 ses=258731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687122.255:4258895): pid=15601 uid=0 auid=1055 ses=258731 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674687148.606:4258896): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674687148.606:4258896): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b464189b010 items=0 ppid=15704 pid=15709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687148.606:4258896): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231392E3134302E3137302E3334002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674687181.271:4258897): pid=15800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687181.271:4258898): pid=15800 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687181.272:4258899): pid=15800 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258732 res=1
type=USER_START msg=audit(1674687181.284:4258900): pid=15800 uid=0 auid=1055 ses=258732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687181.285:4258901): pid=15800 uid=0 auid=1055 ses=258732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687181.585:4258902): pid=15800 uid=0 auid=1055 ses=258732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687181.588:4258903): pid=15800 uid=0 auid=1055 ses=258732 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687241.607:4258904): pid=15989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687241.607:4258905): pid=15989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687241.607:4258906): pid=15989 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258733 res=1
type=USER_START msg=audit(1674687241.621:4258907): pid=15989 uid=0 auid=1055 ses=258733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687241.623:4258908): pid=15989 uid=0 auid=1055 ses=258733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687241.954:4258909): pid=15989 uid=0 auid=1055 ses=258733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687241.955:4258910): pid=15989 uid=0 auid=1055 ses=258733 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687301.972:4258911): pid=16176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687301.972:4258912): pid=16175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687301.972:4258913): pid=16176 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687301.972:4258914): pid=16175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687301.972:4258915): pid=16176 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258734 res=1
type=LOGIN msg=audit(1674687301.972:4258916): pid=16175 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258735 res=1
type=USER_START msg=audit(1674687302.013:4258917): pid=16176 uid=0 auid=1055 ses=258734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687302.014:4258918): pid=16176 uid=0 auid=1055 ses=258734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687302.014:4258919): pid=16175 uid=0 auid=0 ses=258735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687302.017:4258920): pid=16175 uid=0 auid=0 ses=258735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687302.371:4258921): pid=16176 uid=0 auid=1055 ses=258734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687302.374:4258922): pid=16176 uid=0 auid=1055 ses=258734 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687305.381:4258923): pid=16175 uid=0 auid=0 ses=258735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687305.382:4258924): pid=16175 uid=0 auid=0 ses=258735 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687359.901:4258925): avc: denied { read } for pid=16363 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674687359.901:4258925): avc: denied { open } for pid=16363 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687359.901:4258925): arch=c000003e syscall=2 success=yes exit=18 a0=5604ba3fbf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=16363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687359.901:4258925): proctitle="dovecot/auth"
type=AVC msg=audit(1674687359.901:4258926): avc: denied { getattr } for pid=16363 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687359.901:4258926): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffec166730 a2=7fffec166730 a3=fffffc00 items=0 ppid=5547 pid=16363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687359.901:4258926): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674687361.400:4258927): pid=16377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687361.400:4258928): pid=16377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687361.401:4258929): pid=16377 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258736 res=1
type=USER_START msg=audit(1674687361.420:4258930): pid=16377 uid=0 auid=1055 ses=258736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687361.422:4258931): pid=16377 uid=0 auid=1055 ses=258736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687361.699:4258932): pid=16377 uid=0 auid=1055 ses=258736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687361.702:4258933): pid=16377 uid=0 auid=1055 ses=258736 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687361.737:4258934): avc: denied { name_connect } for pid=16363 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674687361.737:4258934): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffec166520 a2=10 a3=7fffec16651c items=0 ppid=5547 pid=16363 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687361.737:4258934): proctitle="dovecot/auth"
type=AVC msg=audit(1674687361.782:4258935): avc: denied { write } for pid=16391 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674687361.782:4258935): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd3aaf6010 a2=6e a3=63d1b381 items=0 ppid=5547 pid=16391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687361.782:4258935): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674687421.719:4258936): pid=16590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687421.719:4258937): pid=16590 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687421.720:4258938): pid=16590 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258737 res=1
type=USER_START msg=audit(1674687421.738:4258939): pid=16590 uid=0 auid=1055 ses=258737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687421.739:4258940): pid=16590 uid=0 auid=1055 ses=258737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687422.085:4258941): pid=16590 uid=0 auid=1055 ses=258737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687422.088:4258942): pid=16590 uid=0 auid=1055 ses=258737 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687467.659:4258943): avc: denied { read } for pid=16770 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674687467.659:4258943): avc: denied { open } for pid=16770 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687467.659:4258943): arch=c000003e syscall=2 success=yes exit=18 a0=55ae11ffdf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=16770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687467.659:4258943): proctitle="dovecot/auth"
type=AVC msg=audit(1674687467.659:4258944): avc: denied { getattr } for pid=16770 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687467.659:4258944): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff6f4a8100 a2=7fff6f4a8100 a3=fffffc00 items=0 ppid=5547 pid=16770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687467.659:4258944): proctitle="dovecot/auth"
type=AVC msg=audit(1674687468.250:4258945): avc: denied { write } for pid=16799 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674687468.250:4258945): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff65c1a0f0 a2=6e a3=63d1b3ec items=0 ppid=5547 pid=16799 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687468.250:4258945): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674687481.104:4258947): pid=16891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687481.104:4258946): pid=16890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687481.104:4258948): pid=16891 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687481.104:4258949): pid=16890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687481.104:4258950): pid=16891 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258738 res=1
type=LOGIN msg=audit(1674687481.105:4258951): pid=16890 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258739 res=1
type=USER_START msg=audit(1674687481.131:4258952): pid=16891 uid=0 auid=1055 ses=258738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687481.132:4258953): pid=16890 uid=0 auid=0 ses=258739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687481.134:4258954): pid=16891 uid=0 auid=1055 ses=258738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687481.134:4258955): pid=16890 uid=0 auid=0 ses=258739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687481.180:4258956): pid=16890 uid=0 auid=0 ses=258739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687481.182:4258957): pid=16890 uid=0 auid=0 ses=258739 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687481.375:4258958): pid=16891 uid=0 auid=1055 ses=258738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687481.377:4258959): pid=16891 uid=0 auid=1055 ses=258738 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687525.152:4258960): avc: denied { name_connect } for pid=16770 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674687525.152:4258960): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff6f4a7ef0 a2=10 a3=7fff6f4a7eec items=0 ppid=5547 pid=16770 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687525.152:4258960): proctitle="dovecot/auth"
type=AVC msg=audit(1674687527.121:4258961): avc: denied { read append } for pid=17045 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674687527.121:4258961): avc: denied { open } for pid=17045 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687527.121:4258961): arch=c000003e syscall=2 success=yes exit=8 a0=55611ff8fa60 a1=402 a2=7ffc4be11eb0 a3=7ffc4be11920 items=0 ppid=5547 pid=17045 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687527.121:4258961): proctitle="dovecot/imap"
type=AVC msg=audit(1674687527.122:4258962): avc: denied { getattr } for pid=17045 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687527.122:4258962): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc4be11e10 a2=7ffc4be11e10 a3=7ffc4be11860 items=0 ppid=5547 pid=17045 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687527.122:4258962): proctitle="dovecot/imap"
type=AVC msg=audit(1674687527.122:4258963): avc: denied { write } for pid=17045 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687527.122:4258963): arch=c000003e syscall=2 success=yes exit=10 a0=55611ff94960 a1=2 a2=7ffc4be11bb0 a3=7ffc4be11660 items=0 ppid=5547 pid=17045 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687527.122:4258963): proctitle="dovecot/imap"
type=AVC msg=audit(1674687527.122:4258964): avc: denied { lock } for pid=17045 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687527.122:4258964): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc4be11ab0 a3=63d1b427 items=0 ppid=5547 pid=17045 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687527.122:4258964): proctitle="dovecot/imap"
type=AVC msg=audit(1674687527.122:4258965): avc: denied { read } for pid=17045 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674687527.122:4258965): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55611ffbd300 a2=90800 a3=0 items=0 ppid=5547 pid=17045 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687527.122:4258965): proctitle="dovecot/imap"
type=AVC msg=audit(1674687527.123:4258966): avc: denied { getattr } for pid=17045 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687527.123:4258966): arch=c000003e syscall=4 success=yes exit=0 a0=55611ff7fa60 a1=7ffc4be11e60 a2=7ffc4be11e60 a3=6f632e6f72676173 items=0 ppid=5547 pid=17045 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687527.123:4258966): proctitle="dovecot/imap"
type=AVC msg=audit(1674687531.032:4258967): avc: denied { write } for pid=17057 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674687531.032:4258967): arch=c000003e syscall=21 success=yes exit=0 a0=556ee1db14c0 a1=2 a2=7b48 a3=7ffe7bf5f220 items=0 ppid=5547 pid=17057 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687531.032:4258967): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674687541.395:4258968): pid=17102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687541.395:4258969): pid=17102 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687541.396:4258970): pid=17102 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258740 res=1
type=USER_START msg=audit(1674687541.410:4258971): pid=17102 uid=0 auid=1055 ses=258740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687541.411:4258972): pid=17102 uid=0 auid=1055 ses=258740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687541.644:4258973): pid=17102 uid=0 auid=1055 ses=258740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687541.645:4258974): pid=17102 uid=0 auid=1055 ses=258740 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687543.195:4258975): avc: denied { read append } for pid=17113 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674687543.195:4258975): avc: denied { open } for pid=17113 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687543.195:4258975): arch=c000003e syscall=2 success=yes exit=8 a0=5566cf0b9a60 a1=402 a2=7fffa47e65c0 a3=7fffa47e6060 items=0 ppid=5547 pid=17113 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687543.195:4258975): proctitle="dovecot/imap"
type=AVC msg=audit(1674687543.195:4258976): avc: denied { getattr } for pid=17113 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687543.195:4258976): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fffa47e6520 a2=7fffa47e6520 a3=7fffa47e5fa0 items=0 ppid=5547 pid=17113 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687543.195:4258976): proctitle="dovecot/imap"
type=AVC msg=audit(1674687543.196:4258977): avc: denied { write } for pid=17113 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687543.196:4258977): arch=c000003e syscall=2 success=yes exit=10 a0=5566cf0beaa0 a1=2 a2=7fffa47e62c0 a3=7fffa47e5d60 items=0 ppid=5547 pid=17113 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687543.196:4258977): proctitle="dovecot/imap"
type=AVC msg=audit(1674687543.196:4258978): avc: denied { lock } for pid=17113 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687543.196:4258978): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffa47e61c0 a3=63d1b437 items=0 ppid=5547 pid=17113 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687543.196:4258978): proctitle="dovecot/imap"
type=AVC msg=audit(1674687543.196:4258979): avc: denied { read } for pid=17113 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674687543.196:4258979): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5566cf0e7300 a2=90800 a3=0 items=0 ppid=5547 pid=17113 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687543.196:4258979): proctitle="dovecot/imap"
type=AVC msg=audit(1674687544.377:4258980): avc: denied { write } for pid=17113 comm="imap" name="cur" dev="vda1" ino=314654205 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674687544.377:4258980): arch=c000003e syscall=21 success=yes exit=0 a0=5566cf0a9500 a1=2 a2=7b00 a3=7fffa47e61a0 items=0 ppid=5547 pid=17113 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687544.377:4258980): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674687601.659:4258981): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687601.659:4258982): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687601.659:4258983): pid=17305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687601.660:4258984): pid=17306 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687601.660:4258985): pid=17305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687601.660:4258986): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687601.660:4258987): pid=17306 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258741 res=1
type=LOGIN msg=audit(1674687601.660:4258988): pid=17305 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258742 res=1
type=LOGIN msg=audit(1674687601.660:4258989): pid=17307 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258743 res=1
type=USER_START msg=audit(1674687601.704:4258990): pid=17305 uid=0 auid=0 ses=258742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687601.705:4258991): pid=17306 uid=0 auid=0 ses=258741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687601.706:4258992): pid=17305 uid=0 auid=0 ses=258742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687601.706:4258993): pid=17306 uid=0 auid=0 ses=258741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687601.706:4258994): pid=17307 uid=0 auid=1055 ses=258743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687601.707:4258995): pid=17307 uid=0 auid=1055 ses=258743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687601.739:4258996): pid=17305 uid=0 auid=0 ses=258742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687601.741:4258997): pid=17305 uid=0 auid=0 ses=258742 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687602.002:4258998): pid=17307 uid=0 auid=1055 ses=258743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687602.011:4258999): pid=17307 uid=0 auid=1055 ses=258743 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687605.045:4259000): pid=17306 uid=0 auid=0 ses=258741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687605.048:4259001): pid=17306 uid=0 auid=0 ses=258741 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674687637.052:4259002): pid=17457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687637.052:4259003): pid=17457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687637.052:4259004): pid=17457 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17457 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674687637.172:4259005): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=17457 suid=74 rport=51679 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=115.134.42.213 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674687637.172:4259006): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=17457 suid=74 rport=51679 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=115.134.42.213 terminal=? res=success'
type=USER_AUTH msg=audit(1674687638.495:4259007): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=115.134.42.213 addr=115.134.42.213 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674687640.376:4259008): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=115.134.42.213 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674687641.515:4259009): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17457 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687641.515:4259010): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=17457 suid=74 rport=51679 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=115.134.42.213 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687641.517:4259011): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=17454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687641.517:4259012): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=17454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687641.517:4259013): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=17454 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674687641.517:4259014): pid=17454 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=115.134.42.213 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674687661.065:4259015): pid=17539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687661.065:4259016): pid=17538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687661.065:4259018): pid=17539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687661.065:4259017): pid=17538 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687661.066:4259019): pid=17538 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258744 res=1
type=LOGIN msg=audit(1674687661.066:4259020): pid=17539 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258745 res=1
type=USER_START msg=audit(1674687661.105:4259021): pid=17539 uid=0 auid=1055 ses=258745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687661.106:4259022): pid=17538 uid=0 auid=0 ses=258744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687661.107:4259023): pid=17538 uid=0 auid=0 ses=258744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687661.107:4259024): pid=17539 uid=0 auid=1055 ses=258745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687661.132:4259025): pid=17538 uid=0 auid=0 ses=258744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687661.134:4259026): pid=17538 uid=0 auid=0 ses=258744 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687661.349:4259027): pid=17539 uid=0 auid=1055 ses=258745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687661.351:4259028): pid=17539 uid=0 auid=1055 ses=258745 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687689.629:4259029): avc: denied { read } for pid=17664 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674687689.629:4259029): avc: denied { open } for pid=17664 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687689.629:4259029): arch=c000003e syscall=2 success=yes exit=18 a0=55f3ecde3f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687689.629:4259029): proctitle="dovecot/auth"
type=AVC msg=audit(1674687689.629:4259030): avc: denied { getattr } for pid=17664 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687689.629:4259030): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffca8c82be0 a2=7ffca8c82be0 a3=fffffc00 items=0 ppid=5547 pid=17664 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687689.629:4259030): proctitle="dovecot/auth"
type=AVC msg=audit(1674687691.701:4259031): avc: denied { name_connect } for pid=17664 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674687691.701:4259031): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffca8c829d0 a2=10 a3=7ffca8c829cc items=0 ppid=5547 pid=17664 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687691.701:4259031): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674687692.801:4259032): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674687692.801:4259032): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b7a8abde010 items=0 ppid=17676 pid=17681 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687692.801:4259032): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131372E38382E34372E323237002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=AVC msg=audit(1674687700.118:4259033): avc: denied { write } for pid=17705 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674687700.118:4259033): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff58619e20 a2=6e a3=63d1b4d4 items=0 ppid=5547 pid=17705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687700.118:4259033): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674687721.367:4259034): pid=17773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687721.367:4259035): pid=17773 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687721.368:4259036): pid=17773 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258746 res=1
type=USER_START msg=audit(1674687721.382:4259037): pid=17773 uid=0 auid=1055 ses=258746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687721.385:4259038): pid=17773 uid=0 auid=1055 ses=258746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687721.689:4259039): pid=17773 uid=0 auid=1055 ses=258746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687721.691:4259040): pid=17773 uid=0 auid=1055 ses=258746 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687777.824:4259041): avc: denied { read } for pid=17995 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674687777.824:4259041): avc: denied { open } for pid=17995 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687777.824:4259041): arch=c000003e syscall=2 success=yes exit=18 a0=55a944f41f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=17995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687777.824:4259041): proctitle="dovecot/auth"
type=AVC msg=audit(1674687777.824:4259042): avc: denied { getattr } for pid=17995 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674687777.824:4259042): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc78733060 a2=7ffc78733060 a3=fffffc00 items=0 ppid=5547 pid=17995 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687777.824:4259042): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674687781.711:4259043): pid=18096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687781.712:4259044): pid=18096 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687781.713:4259045): pid=18096 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258747 res=1
type=USER_START msg=audit(1674687781.731:4259046): pid=18096 uid=0 auid=1055 ses=258747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687781.732:4259047): pid=18096 uid=0 auid=1055 ses=258747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687782.025:4259048): pid=18096 uid=0 auid=1055 ses=258747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687782.027:4259049): pid=18096 uid=0 auid=1055 ses=258747 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687841.041:4259050): pid=18295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687841.041:4259051): pid=18295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687841.041:4259052): pid=18295 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258748 res=1
type=USER_START msg=audit(1674687841.053:4259053): pid=18295 uid=0 auid=1055 ses=258748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687841.055:4259054): pid=18295 uid=0 auid=1055 ses=258748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687841.311:4259055): pid=18295 uid=0 auid=1055 ses=258748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687841.313:4259056): pid=18295 uid=0 auid=1055 ses=258748 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674687891.389:4259057): avc: denied { name_connect } for pid=17995 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674687891.389:4259057): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc78732e50 a2=10 a3=7ffc78732e4c items=0 ppid=5547 pid=17995 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687891.389:4259057): proctitle="dovecot/auth"
type=AVC msg=audit(1674687891.423:4259058): avc: denied { write } for pid=18455 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674687891.423:4259058): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff387412e0 a2=6e a3=63d1b593 items=0 ppid=5547 pid=18455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687891.423:4259058): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674687901.328:4259059): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687901.328:4259060): pid=18495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687901.328:4259061): pid=18493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687901.328:4259062): pid=18495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687901.328:4259063): pid=18493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687901.328:4259064): pid=18494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687901.329:4259066): pid=18494 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258750 res=1
type=LOGIN msg=audit(1674687901.329:4259065): pid=18495 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258749 res=1
type=LOGIN msg=audit(1674687901.329:4259067): pid=18493 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258751 res=1
type=USER_START msg=audit(1674687901.370:4259068): pid=18494 uid=0 auid=0 ses=258750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687901.370:4259069): pid=18493 uid=0 auid=0 ses=258751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674687901.371:4259070): pid=18495 uid=0 auid=1055 ses=258749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687901.372:4259071): pid=18495 uid=0 auid=1055 ses=258749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687901.372:4259072): pid=18494 uid=0 auid=0 ses=258750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687901.372:4259073): pid=18493 uid=0 auid=0 ses=258751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687901.470:4259074): pid=18494 uid=0 auid=0 ses=258750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687901.472:4259075): pid=18494 uid=0 auid=0 ses=258750 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687901.682:4259076): pid=18495 uid=0 auid=1055 ses=258749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687901.684:4259077): pid=18495 uid=0 auid=1055 ses=258749 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687904.738:4259078): pid=18493 uid=0 auid=0 ses=258751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687904.740:4259079): pid=18493 uid=0 auid=0 ses=258751 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674687961.759:4259080): pid=18718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674687961.759:4259081): pid=18718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674687961.761:4259082): pid=18718 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258752 res=1
type=USER_START msg=audit(1674687961.777:4259083): pid=18718 uid=0 auid=1055 ses=258752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674687961.778:4259084): pid=18718 uid=0 auid=1055 ses=258752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674687962.013:4259085): pid=18718 uid=0 auid=1055 ses=258752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674687962.016:4259086): pid=18718 uid=0 auid=1055 ses=258752 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674687962.064:4259087): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674687962.064:4259087): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ac7231ee010 items=0 ppid=18726 pid=18734 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687962.064:4259087): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036302E3136362E35322E3138002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543233
type=NETFILTER_CFG msg=audit(1674687970.372:4259088): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674687970.372:4259088): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b00d09ce010 items=0 ppid=18754 pid=18760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674687970.372:4259088): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650035382E31372E3132382E37002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432333A
type=CRYPTO_KEY_USER msg=audit(1674687981.066:4259089): pid=18787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687981.066:4259090): pid=18787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687981.066:4259091): pid=18787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18787 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674687981.307:4259092): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=18787 suid=74 rport=33763 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.33.38.197 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674687981.307:4259093): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=18787 suid=74 rport=33763 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.33.38.197 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687984.348:4259094): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18787 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687984.348:4259095): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=18787 suid=74 rport=33763 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=114.33.38.197 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687984.349:4259096): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=18785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687984.349:4259097): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=18785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674687984.349:4259098): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=18785 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674687984.349:4259099): pid=18785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=114.33.38.197 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674688021.030:4259100): pid=18916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688021.031:4259101): pid=18916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688021.031:4259102): pid=18916 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258753 res=1
type=USER_START msg=audit(1674688021.044:4259103): pid=18916 uid=0 auid=1055 ses=258753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688021.045:4259104): pid=18916 uid=0 auid=1055 ses=258753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688021.279:4259105): pid=18916 uid=0 auid=1055 ses=258753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688021.281:4259106): pid=18916 uid=0 auid=1055 ses=258753 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674688056.123:4259107): avc: denied { read } for pid=19056 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674688056.123:4259107): avc: denied { open } for pid=19056 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688056.123:4259107): arch=c000003e syscall=2 success=yes exit=18 a0=55a9c3097f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=19056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688056.123:4259107): proctitle="dovecot/auth"
type=AVC msg=audit(1674688056.123:4259108): avc: denied { getattr } for pid=19056 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688056.123:4259108): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd8762f530 a2=7ffd8762f530 a3=fffffc00 items=0 ppid=5547 pid=19056 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688056.123:4259108): proctitle="dovecot/auth"
type=AVC msg=audit(1674688056.429:4259109): avc: denied { name_connect } for pid=19056 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674688056.429:4259109): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd8762f320 a2=10 a3=7ffd8762f31c items=0 ppid=5547 pid=19056 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688056.429:4259109): proctitle="dovecot/auth"
type=AVC msg=audit(1674688056.458:4259110): avc: denied { write } for pid=19058 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688056.458:4259110): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff6c0148c0 a2=6e a3=63d1b638 items=0 ppid=5547 pid=19058 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688056.458:4259110): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674688081.299:4259111): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688081.299:4259112): pid=19132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688081.300:4259113): pid=19132 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258754 res=1
type=USER_START msg=audit(1674688081.319:4259114): pid=19132 uid=0 auid=1055 ses=258754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688081.321:4259115): pid=19132 uid=0 auid=1055 ses=258754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688081.686:4259116): pid=19132 uid=0 auid=1055 ses=258754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688081.687:4259117): pid=19132 uid=0 auid=1055 ses=258754 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674688138.626:4259118): avc: denied { name_connect } for pid=19325 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674688138.626:4259118): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff586a91b0 a2=10 a3=7fff586a91ac items=0 ppid=5547 pid=19325 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688138.626:4259118): proctitle="dovecot/auth"
type=AVC msg=audit(1674688138.655:4259119): avc: denied { write } for pid=19356 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688138.655:4259119): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd4b0aa650 a2=6e a3=63d1b68a items=0 ppid=5547 pid=19356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688138.655:4259119): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674688141.705:4259120): pid=19418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688141.705:4259121): pid=19419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688141.706:4259122): pid=19418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688141.706:4259123): pid=19419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688141.706:4259124): pid=19418 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258755 res=1
type=LOGIN msg=audit(1674688141.706:4259125): pid=19419 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258756 res=1
type=USER_START msg=audit(1674688141.743:4259126): pid=19418 uid=0 auid=0 ses=258755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674688141.743:4259127): pid=19419 uid=0 auid=1055 ses=258756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688141.745:4259128): pid=19419 uid=0 auid=1055 ses=258756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688141.746:4259129): pid=19418 uid=0 auid=0 ses=258755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688142.092:4259130): pid=19419 uid=0 auid=1055 ses=258756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688142.095:4259131): pid=19419 uid=0 auid=1055 ses=258756 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688142.862:4259132): pid=19418 uid=0 auid=0 ses=258755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688142.863:4259133): pid=19418 uid=0 auid=0 ses=258755 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688201.882:4259134): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688201.883:4259135): pid=19631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688201.883:4259136): pid=19631 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258757 res=1
type=USER_ACCT msg=audit(1674688201.884:4259137): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688201.884:4259138): pid=19633 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688201.884:4259139): pid=19633 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258758 res=1
type=USER_ACCT msg=audit(1674688201.906:4259140): pid=19632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688201.906:4259141): pid=19632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688201.907:4259142): pid=19632 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258759 res=1
type=USER_START msg=audit(1674688201.956:4259144): pid=19633 uid=0 auid=1055 ses=258758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674688201.956:4259143): pid=19631 uid=0 auid=0 ses=258757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674688201.957:4259145): pid=19632 uid=0 auid=0 ses=258759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688201.958:4259146): pid=19631 uid=0 auid=0 ses=258757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688201.958:4259147): pid=19632 uid=0 auid=0 ses=258759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688201.958:4259148): pid=19633 uid=0 auid=1055 ses=258758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688202.004:4259149): pid=19631 uid=0 auid=0 ses=258757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688202.008:4259150): pid=19631 uid=0 auid=0 ses=258757 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688202.307:4259151): pid=19633 uid=0 auid=1055 ses=258758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688202.311:4259152): pid=19633 uid=0 auid=1055 ses=258758 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688205.331:4259153): pid=19632 uid=0 auid=0 ses=258759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688205.334:4259154): pid=19632 uid=0 auid=0 ses=258759 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674688219.293:4259155): avc: denied { name_connect } for pid=19325 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674688219.293:4259155): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff586a91b0 a2=10 a3=7fff586a91ac items=0 ppid=5547 pid=19325 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688219.293:4259155): proctitle="dovecot/auth"
type=AVC msg=audit(1674688219.304:4259156): avc: denied { write } for pid=19356 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688219.304:4259156): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd4b0aa650 a2=6e a3=63d1b6db items=0 ppid=5547 pid=19356 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688219.304:4259156): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674688222.415:4259157): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674688222.415:4259157): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2aacf9ddb010 items=0 ppid=19704 pid=19709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688222.415:4259157): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003139342E38372E3230302E313234002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=NETFILTER_CFG msg=audit(1674688226.165:4259158): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674688226.165:4259158): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5390c88010 items=0 ppid=19725 pid=19742 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688226.165:4259158): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674688226.170:4259159): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674688226.170:4259159): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f20e9ce0010 items=0 ppid=19725 pid=19744 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688226.170:4259159): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674688226.173:4259160): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674688226.173:4259160): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7119624010 items=0 ppid=19725 pid=19745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688226.173:4259160): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674688226.177:4259161): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674688226.177:4259161): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f54c771c010 items=0 ppid=19725 pid=19748 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688226.177:4259161): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674688226.473:4259162): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674688226.473:4259162): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fee0d16a010 items=0 ppid=19725 pid=19762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688226.473:4259162): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003132312E3138372E3235312E323130002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688226.480:4259163): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674688226.480:4259163): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fac67f31010 items=0 ppid=19725 pid=19763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688226.480:4259163): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003132312E3138372E3235312E323130002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674688226.485:4259164): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674688226.485:4259164): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc43c765010 items=0 ppid=19725 pid=19764 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688226.485:4259164): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003139342E38372E3230302E313234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688226.490:4259165): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674688226.490:4259165): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4423c32010 items=0 ppid=19725 pid=19765 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688226.490:4259165): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003139342E38372E3230302E313234002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674688229.821:4259166): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674688229.821:4259166): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2c0a5ee010 items=0 ppid=19779 pid=19784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688229.821:4259166): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232322E3138382E39352E323032002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674688240.633:4259167): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674688240.633:4259168): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674688240.633:4259169): pid=19818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19818 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674688240.809:4259170): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=19818 suid=74 rport=41718 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674688240.810:4259171): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=19818 suid=74 rport=41718 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=USER_AUTH msg=audit(1674688241.801:4259172): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674688244.465:4259173): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674688247.645:4259174): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674688249.797:4259175): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674688252.976:4259176): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=194.110.203.109 addr=194.110.203.109 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674688255.149:4259177): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674688258.328:4259178): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19818 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674688258.328:4259179): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=19818 suid=74 rport=41718 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674688258.329:4259180): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=19817 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674688258.330:4259181): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=19817 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674688258.330:4259182): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=19817 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674688258.330:4259183): pid=19817 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=194.110.203.109 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674688261.357:4259184): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688261.359:4259185): pid=19892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688261.359:4259186): pid=19892 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258760 res=1
type=USER_START msg=audit(1674688261.383:4259187): pid=19892 uid=0 auid=1055 ses=258760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688261.386:4259188): pid=19892 uid=0 auid=1055 ses=258760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688261.669:4259189): pid=19892 uid=0 auid=1055 ses=258760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688261.671:4259190): pid=19892 uid=0 auid=1055 ses=258760 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688321.688:4259191): pid=20104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688321.688:4259192): pid=20104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688321.688:4259193): pid=20104 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258761 res=1
type=USER_START msg=audit(1674688321.700:4259194): pid=20104 uid=0 auid=1055 ses=258761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688321.701:4259195): pid=20104 uid=0 auid=1055 ses=258761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688321.959:4259196): pid=20104 uid=0 auid=1055 ses=258761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688321.962:4259197): pid=20104 uid=0 auid=1055 ses=258761 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674688365.839:4259198): avc: denied { read } for pid=20248 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674688365.839:4259198): avc: denied { open } for pid=20248 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688365.839:4259198): arch=c000003e syscall=2 success=yes exit=18 a0=56020f2eff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=20248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688365.839:4259198): proctitle="dovecot/auth"
type=AVC msg=audit(1674688365.839:4259199): avc: denied { getattr } for pid=20248 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688365.839:4259199): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff92a82b90 a2=7fff92a82b90 a3=fffffc00 items=0 ppid=5547 pid=20248 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688365.839:4259199): proctitle="dovecot/auth"
type=AVC msg=audit(1674688366.315:4259200): avc: denied { name_connect } for pid=20248 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674688366.315:4259200): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fff92a82980 a2=10 a3=7fff92a8297c items=0 ppid=5547 pid=20248 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688366.315:4259200): proctitle="dovecot/auth"
type=AVC msg=audit(1674688366.346:4259201): avc: denied { write } for pid=20252 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688366.346:4259201): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fffb98faec0 a2=6e a3=63d1b76e items=0 ppid=5547 pid=20252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688366.346:4259201): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674688369.075:4259202): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=20259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674688369.075:4259203): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=20259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674688369.075:4259204): pid=20259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=20259 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688381.977:4259205): pid=20301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688381.977:4259206): pid=20301 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688381.977:4259207): pid=20302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688381.977:4259208): pid=20302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688381.978:4259209): pid=20302 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258763 res=1
type=LOGIN msg=audit(1674688381.978:4259210): pid=20301 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258762 res=1
type=USER_START msg=audit(1674688382.011:4259211): pid=20301 uid=0 auid=0 ses=258762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674688382.011:4259212): pid=20302 uid=0 auid=1055 ses=258763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688382.012:4259213): pid=20302 uid=0 auid=1055 ses=258763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688382.013:4259214): pid=20301 uid=0 auid=0 ses=258762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688382.061:4259215): pid=20301 uid=0 auid=0 ses=258762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688382.062:4259216): pid=20301 uid=0 auid=0 ses=258762 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688382.264:4259217): pid=20302 uid=0 auid=1055 ses=258763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688382.267:4259218): pid=20302 uid=0 auid=1055 ses=258763 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688441.283:4259219): pid=20506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688441.283:4259220): pid=20506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688441.283:4259221): pid=20506 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258764 res=1
type=USER_START msg=audit(1674688441.298:4259222): pid=20506 uid=0 auid=1055 ses=258764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688441.299:4259223): pid=20506 uid=0 auid=1055 ses=258764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688441.569:4259224): pid=20506 uid=0 auid=1055 ses=258764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688441.571:4259225): pid=20506 uid=0 auid=1055 ses=258764 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674688448.779:4259226): avc: denied { write } for pid=20535 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688448.779:4259226): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc9e7d4110 a2=6e a3=63d1b7c0 items=0 ppid=5547 pid=20535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688448.779:4259226): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674688449.261:4259227): avc: denied { read append } for pid=20537 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674688449.261:4259227): avc: denied { open } for pid=20537 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688449.261:4259227): arch=c000003e syscall=2 success=yes exit=8 a0=56080afeaa60 a1=402 a2=7fffac23b260 a3=7fffac23ace0 items=0 ppid=5547 pid=20537 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688449.261:4259227): proctitle="dovecot/imap"
type=AVC msg=audit(1674688449.261:4259228): avc: denied { getattr } for pid=20537 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688449.261:4259228): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fffac23b1c0 a2=7fffac23b1c0 a3=7fffac23ac20 items=0 ppid=5547 pid=20537 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688449.261:4259228): proctitle="dovecot/imap"
type=AVC msg=audit(1674688449.261:4259229): avc: denied { write } for pid=20537 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688449.261:4259229): arch=c000003e syscall=2 success=yes exit=10 a0=56080afef990 a1=2 a2=7fffac23af60 a3=7fffac23aa20 items=0 ppid=5547 pid=20537 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688449.261:4259229): proctitle="dovecot/imap"
type=AVC msg=audit(1674688449.261:4259230): avc: denied { lock } for pid=20537 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688449.261:4259230): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fffac23ae60 a3=63d1b7c1 items=0 ppid=5547 pid=20537 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688449.261:4259230): proctitle="dovecot/imap"
type=AVC msg=audit(1674688449.262:4259231): avc: denied { read } for pid=20537 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674688449.262:4259231): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=56080b018300 a2=90800 a3=0 items=0 ppid=5547 pid=20537 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688449.262:4259231): proctitle="dovecot/imap"
type=AVC msg=audit(1674688449.262:4259232): avc: denied { getattr } for pid=20537 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688449.262:4259232): arch=c000003e syscall=4 success=yes exit=0 a0=56080afdaa60 a1=7fffac23b210 a2=7fffac23b210 a3=6f632e6f72676173 items=0 ppid=5547 pid=20537 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688449.262:4259232): proctitle="dovecot/imap"
type=AVC msg=audit(1674688450.610:4259233): avc: denied { write } for pid=20597 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674688450.610:4259233): arch=c000003e syscall=21 success=yes exit=0 a0=559758bdf4c0 a1=2 a2=7b48 a3=7fffdc7b7160 items=0 ppid=5547 pid=20597 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688450.610:4259233): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674688501.595:4259234): pid=20805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688501.596:4259235): pid=20805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688501.598:4259236): pid=20805 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258765 res=1
type=USER_ACCT msg=audit(1674688501.603:4259237): pid=20806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688501.603:4259238): pid=20806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688501.603:4259239): pid=20806 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258766 res=1
type=USER_START msg=audit(1674688501.644:4259240): pid=20805 uid=0 auid=0 ses=258765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674688501.647:4259241): pid=20806 uid=0 auid=1055 ses=258766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688501.648:4259242): pid=20806 uid=0 auid=1055 ses=258766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688501.648:4259243): pid=20805 uid=0 auid=0 ses=258765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688502.031:4259244): pid=20806 uid=0 auid=1055 ses=258766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688502.034:4259245): pid=20806 uid=0 auid=1055 ses=258766 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688505.070:4259246): pid=20805 uid=0 auid=0 ses=258765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688505.072:4259247): pid=20805 uid=0 auid=0 ses=258765 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688561.089:4259248): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688561.089:4259249): pid=21000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688561.089:4259250): pid=21000 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258767 res=1
type=USER_START msg=audit(1674688561.106:4259251): pid=21000 uid=0 auid=1055 ses=258767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688561.107:4259252): pid=21000 uid=0 auid=1055 ses=258767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688561.373:4259253): pid=21000 uid=0 auid=1055 ses=258767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688561.375:4259254): pid=21000 uid=0 auid=1055 ses=258767 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674688604.765:4259255): avc: denied { read } for pid=21159 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674688604.765:4259255): avc: denied { open } for pid=21159 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688604.765:4259255): arch=c000003e syscall=2 success=yes exit=18 a0=5635a4343f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=21159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688604.765:4259255): proctitle="dovecot/auth"
type=AVC msg=audit(1674688604.765:4259256): avc: denied { getattr } for pid=21159 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674688604.765:4259256): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd34306070 a2=7ffd34306070 a3=fffffc00 items=0 ppid=5547 pid=21159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688604.765:4259256): proctitle="dovecot/auth"
type=AVC msg=audit(1674688606.833:4259257): avc: denied { name_connect } for pid=21159 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674688606.833:4259257): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd34305e60 a2=10 a3=7ffd34305e5c items=0 ppid=5547 pid=21159 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688606.833:4259257): proctitle="dovecot/auth"
type=AVC msg=audit(1674688606.861:4259258): avc: denied { write } for pid=21165 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688606.861:4259258): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc83b7f5a0 a2=6e a3=63d1b85e items=0 ppid=5547 pid=21165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688606.861:4259258): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674688621.393:4259259): pid=21213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688621.393:4259260): pid=21213 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688621.395:4259261): pid=21213 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258768 res=1
type=USER_START msg=audit(1674688621.415:4259262): pid=21213 uid=0 auid=1055 ses=258768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688621.419:4259263): pid=21213 uid=0 auid=1055 ses=258768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688621.796:4259264): pid=21213 uid=0 auid=1055 ses=258768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688621.797:4259265): pid=21213 uid=0 auid=1055 ses=258768 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688681.811:4259266): pid=21421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688681.811:4259267): pid=21421 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688681.811:4259268): pid=21421 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258769 res=1
type=USER_START msg=audit(1674688681.827:4259269): pid=21421 uid=0 auid=1055 ses=258769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688681.828:4259270): pid=21421 uid=0 auid=1055 ses=258769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688682.105:4259271): pid=21421 uid=0 auid=1055 ses=258769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688682.107:4259272): pid=21421 uid=0 auid=1055 ses=258769 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688741.120:4259273): pid=21596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688741.120:4259274): pid=21596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688741.120:4259275): pid=21596 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258770 res=1
type=USER_START msg=audit(1674688741.130:4259276): pid=21596 uid=0 auid=1055 ses=258770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688741.131:4259277): pid=21596 uid=0 auid=1055 ses=258770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688741.395:4259278): pid=21596 uid=0 auid=1055 ses=258770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688741.397:4259279): pid=21596 uid=0 auid=1055 ses=258770 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674688758.458:4259280): avc: denied { name_connect } for pid=21668 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674688758.458:4259280): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffd55ef1ce0 a2=10 a3=7ffd55ef1cdc items=0 ppid=5547 pid=21668 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688758.458:4259280): proctitle="dovecot/auth"
type=AVC msg=audit(1674688758.488:4259281): avc: denied { write } for pid=21696 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688758.488:4259281): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc61d2d1d0 a2=6e a3=63d1b8f6 items=0 ppid=5547 pid=21696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688758.488:4259281): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674688801.416:4259282): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688801.416:4259283): pid=21890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688801.416:4259284): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688801.416:4259285): pid=21889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688801.416:4259286): pid=21888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688801.416:4259287): pid=21890 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688801.416:4259288): pid=21887 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688801.416:4259289): pid=21889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688801.416:4259291): pid=21890 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258772 res=1
type=LOGIN msg=audit(1674688801.416:4259290): pid=21887 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258771 res=1
type=LOGIN msg=audit(1674688801.417:4259292): pid=21888 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258773 res=1
type=LOGIN msg=audit(1674688801.417:4259293): pid=21889 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258774 res=1
type=USER_START msg=audit(1674688801.499:4259295): pid=21888 uid=0 auid=0 ses=258773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674688801.499:4259294): pid=21890 uid=0 auid=1055 ses=258772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674688801.500:4259296): pid=21889 uid=0 auid=0 ses=258774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674688801.504:4259297): pid=21887 uid=0 auid=0 ses=258771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688801.505:4259298): pid=21888 uid=0 auid=0 ses=258773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688801.505:4259299): pid=21890 uid=0 auid=1055 ses=258772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688801.505:4259300): pid=21887 uid=0 auid=0 ses=258771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688801.507:4259301): pid=21889 uid=0 auid=0 ses=258774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688801.553:4259302): pid=21887 uid=0 auid=0 ses=258771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688801.565:4259303): pid=21887 uid=0 auid=0 ses=258771 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688801.622:4259304): pid=21889 uid=0 auid=0 ses=258774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688801.625:4259305): pid=21889 uid=0 auid=0 ses=258774 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688801.861:4259306): pid=21890 uid=0 auid=1055 ses=258772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688801.863:4259307): pid=21890 uid=0 auid=1055 ses=258772 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688804.927:4259308): pid=21888 uid=0 auid=0 ses=258773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688804.929:4259309): pid=21888 uid=0 auid=0 ses=258773 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674688805.095:4259310): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674688805.095:4259310): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b353384c010 items=0 ppid=1588 pid=21930 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.095:4259310): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003230322E39392E3233332E3135312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A32383A3330002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.099:4259311): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674688805.099:4259311): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ade58887010 items=0 ppid=1588 pid=21931 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.099:4259311): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131332E35392E33342E352F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A32383A3436002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.103:4259312): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674688805.103:4259312): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b404eaff010 items=0 ppid=1588 pid=21932 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.103:4259312): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E3131312E3138332E31392F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A34303A3330002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.107:4259313): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674688805.107:4259313): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b8ab5738010 items=0 ppid=1588 pid=21933 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.107:4259313): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E39312E3133382E31332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A34323A3438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.112:4259314): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674688805.112:4259314): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b37b4d24010 items=0 ppid=1588 pid=21934 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.112:4259314): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E33352E3130352E33302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A34333A3139002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.116:4259315): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674688805.116:4259315): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b2303055010 items=0 ppid=1588 pid=21935 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.116:4259315): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E37352E3230362E3234342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A34353A3530002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.120:4259316): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674688805.120:4259316): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b8df7f51010 items=0 ppid=1588 pid=21936 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.120:4259316): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3133382E35372E3134382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A34373A3333002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.125:4259317): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674688805.125:4259317): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b445715e010 items=0 ppid=1588 pid=21937 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.125:4259317): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003134312E39382E31312E35372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A34383A3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.129:4259318): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674688805.129:4259318): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b09ca3d0010 items=0 ppid=1588 pid=21938 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.129:4259318): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130312E34332E3134372E36322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A35313A3439002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.133:4259319): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674688805.133:4259319): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2abcc54d6010 items=0 ppid=1588 pid=21939 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.133:4259319): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138302E3136392E3136302E3232312F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A35373A3439002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.137:4259320): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674688805.137:4259320): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b9c828ca010 items=0 ppid=1588 pid=21940 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.137:4259320): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232322E3138352E3235332E34322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432323A35383A3533002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.142:4259321): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674688805.142:4259321): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ab285539010 items=0 ppid=1588 pid=21941 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.142:4259321): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003138332E3232302E3234312E3139372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A30363A3132002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.146:4259322): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674688805.146:4259322): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac0f1807010 items=0 ppid=1588 pid=21942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.146:4259322): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3133382E35362E3138372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A31333A3234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.151:4259323): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674688805.151:4259323): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ac5ae8ea010 items=0 ppid=1588 pid=21943 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.151:4259323): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3139312E3134392E3232302F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A31353A3237002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688805.155:4259324): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674688805.155:4259324): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af6f71fe010 items=0 ppid=1588 pid=21944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688805.155:4259324): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003134312E39382E31312E33362F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A31383A3536002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674688809.893:4259325): table=filter family=2 entries=1038
type=SYSCALL msg=audit(1674688809.893:4259325): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad3bd65e010 items=0 ppid=21963 pid=21968 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688809.893:4259325): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3134372E36342E313830002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674688861.947:4259326): pid=22135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688861.948:4259327): pid=22135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688861.948:4259328): pid=22135 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258775 res=1
type=USER_START msg=audit(1674688861.968:4259329): pid=22135 uid=0 auid=1055 ses=258775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688861.970:4259330): pid=22135 uid=0 auid=1055 ses=258775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688862.228:4259331): pid=22135 uid=0 auid=1055 ses=258775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688862.229:4259332): pid=22135 uid=0 auid=1055 ses=258775 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674688865.604:4259333): pid=22155 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688865.605:4259334): pid=22155 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674688865.606:4259335): pid=22155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688865.629:4259336): pid=22155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688865.632:4259337): pid=22155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688865.632:4259338): pid=22155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688865.654:4259339): pid=22159 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688865.654:4259340): pid=22159 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674688865.655:4259341): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688865.668:4259342): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688865.671:4259343): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688865.671:4259344): pid=22159 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688865.693:4259345): pid=22164 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688865.693:4259346): pid=22164 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674688865.694:4259347): pid=22164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688865.708:4259348): pid=22164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688865.713:4259349): pid=22164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688865.713:4259350): pid=22164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688865.841:4259351): pid=22170 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688865.841:4259352): pid=22170 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674688865.841:4259353): pid=22170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688865.856:4259354): pid=22170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688865.859:4259355): pid=22170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688865.859:4259356): pid=22170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688865.879:4259357): pid=22174 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688865.880:4259358): pid=22174 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674688865.880:4259359): pid=22174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688865.893:4259360): pid=22174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688865.896:4259361): pid=22174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688865.896:4259362): pid=22174 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688865.918:4259363): pid=22180 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688865.918:4259364): pid=22180 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674688865.919:4259365): pid=22180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688865.933:4259366): pid=22180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688865.936:4259367): pid=22180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688865.936:4259368): pid=22180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688865.966:4259369): pid=22185 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688865.966:4259370): pid=22185 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674688865.966:4259371): pid=22185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688865.982:4259372): pid=22185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688865.986:4259373): pid=22185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688865.986:4259374): pid=22185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688866.009:4259375): pid=22190 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688866.010:4259376): pid=22190 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674688866.010:4259377): pid=22190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688866.030:4259378): pid=22190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688866.033:4259379): pid=22190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688866.033:4259380): pid=22190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688866.062:4259381): pid=22193 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688866.062:4259382): pid=22193 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674688866.062:4259383): pid=22193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688866.077:4259384): pid=22193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688866.081:4259385): pid=22193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688866.081:4259386): pid=22193 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688866.106:4259387): pid=22198 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688866.106:4259388): pid=22198 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674688866.106:4259389): pid=22198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688866.125:4259390): pid=22198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688866.128:4259391): pid=22198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688866.128:4259392): pid=22198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688866.150:4259393): pid=22202 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688866.151:4259394): pid=22202 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674688866.151:4259395): pid=22202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688866.166:4259396): pid=22202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688866.169:4259397): pid=22202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688866.170:4259398): pid=22202 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688868.192:4259399): pid=22215 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688868.192:4259400): pid=22215 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674688868.192:4259401): pid=22215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688868.212:4259402): pid=22215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688868.266:4259403): pid=22215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688868.266:4259404): pid=22215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688868.301:4259405): pid=22222 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688868.301:4259406): pid=22222 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674688868.302:4259407): pid=22222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688868.322:4259408): pid=22222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688868.404:4259409): pid=22222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688868.404:4259410): pid=22222 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688868.427:4259411): pid=22228 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688868.427:4259412): pid=22228 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674688868.428:4259413): pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688868.441:4259414): pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688868.551:4259415): pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688868.551:4259416): pid=22228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688868.587:4259417): pid=22236 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688868.587:4259418): pid=22236 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674688868.587:4259419): pid=22236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688868.603:4259420): pid=22236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688868.606:4259421): pid=22236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688868.606:4259422): pid=22236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688868.629:4259423): pid=22241 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688868.629:4259424): pid=22241 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D4E556B496F6235685155525A644A31792E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674688868.630:4259425): pid=22241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688868.643:4259426): pid=22241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688868.646:4259427): pid=22241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688868.646:4259428): pid=22241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688868.670:4259429): pid=22246 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688868.670:4259430): pid=22246 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D4E556B496F6235685155525A644A31792E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674688868.670:4259431): pid=22246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688868.684:4259432): pid=22246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688868.690:4259433): pid=22246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688868.690:4259434): pid=22246 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688868.715:4259435): pid=22252 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688868.715:4259436): pid=22252 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D4E556B496F6235685155525A644A31792E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674688868.715:4259437): pid=22252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688868.734:4259438): pid=22252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688868.738:4259439): pid=22252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688868.738:4259440): pid=22252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688868.761:4259441): pid=22257 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688868.761:4259442): pid=22257 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674688868.761:4259443): pid=22257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688868.774:4259444): pid=22257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688868.779:4259445): pid=22257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688868.779:4259446): pid=22257 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688869.169:4259447): pid=22265 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688869.169:4259448): pid=22265 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674688869.169:4259449): pid=22265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688869.183:4259450): pid=22265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688869.186:4259451): pid=22265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688869.186:4259452): pid=22265 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688869.982:4259453): pid=22272 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688869.982:4259454): pid=22272 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674688869.982:4259455): pid=22272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688869.996:4259456): pid=22272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688869.999:4259457): pid=22272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688869.999:4259458): pid=22272 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688870.019:4259459): pid=22277 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688870.019:4259460): pid=22277 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674688870.020:4259461): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688870.033:4259462): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688870.036:4259463): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688870.036:4259464): pid=22277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688870.057:4259465): pid=22281 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688870.057:4259466): pid=22281 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674688870.057:4259467): pid=22281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688870.071:4259468): pid=22281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688870.074:4259469): pid=22281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688870.075:4259470): pid=22281 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688870.102:4259471): pid=22287 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688870.102:4259472): pid=22287 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F747765616B73657474696E67206B65793D7365727665725F6C6F63616C65202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674688870.103:4259473): pid=22287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688870.116:4259474): pid=22287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688870.238:4259475): pid=22287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688870.238:4259476): pid=22287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688871.078:4259477): pid=22297 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688871.078:4259478): pid=22297 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674688871.078:4259479): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688871.092:4259480): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688871.161:4259481): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688871.161:4259482): pid=22297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688871.193:4259483): pid=22302 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688871.193:4259484): pid=22302 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674688871.194:4259485): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688871.206:4259486): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674688872.125:4259487): avc: denied { name_connect } for pid=21668 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674688872.125:4259487): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd55ef1ce0 a2=10 a3=7ffd55ef1cdc items=0 ppid=5547 pid=21668 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688872.125:4259487): proctitle="dovecot/auth"
type=AVC msg=audit(1674688872.157:4259488): avc: denied { write } for pid=22314 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688872.157:4259488): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffddb76c8d0 a2=6e a3=63d1b968 items=0 ppid=5547 pid=22314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688872.157:4259488): proctitle=646F7665636F742F61757468002D77
type=USER_END msg=audit(1674688872.358:4259489): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688872.358:4259490): pid=22302 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwevmhonda" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688872.554:4259491): pid=22318 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688872.554:4259492): pid=22318 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674688872.554:4259493): pid=22318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688872.573:4259494): pid=22318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688873.883:4259495): pid=22318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688873.884:4259496): pid=22318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwletsstalkfood" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688874.092:4259497): pid=22328 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688874.092:4259498): pid=22328 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674688874.093:4259499): pid=22328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688874.107:4259500): pid=22328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688875.755:4259501): pid=22328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688875.755:4259502): pid=22328 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="shalinijames" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688876.034:4259503): pid=22342 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688876.034:4259504): pid=22342 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674688876.034:4259505): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688876.050:4259506): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688877.192:4259507): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688877.193:4259508): pid=22342 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688877.285:4259509): pid=22355 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688877.285:4259510): pid=22355 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674688877.285:4259511): pid=22355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688877.302:4259512): pid=22355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688877.680:4259513): pid=22355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688877.680:4259514): pid=22355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688877.830:4259515): pid=22362 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688877.830:4259516): pid=22362 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F485950452026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777465737475676F2F7075626C69635F68746D6C2F48595045202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674688877.831:4259517): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688877.847:4259518): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688879.801:4259519): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688879.801:4259520): pid=22362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwtestugo" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688880.038:4259521): pid=22378 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688880.038:4259522): pid=22378 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674688880.039:4259523): pid=22378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688880.052:4259524): pid=22378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674688880.297:4259525): avc: denied { write } for pid=22314 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674688880.297:4259525): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffddb76c8d0 a2=6e a3=63d1b970 items=0 ppid=5547 pid=22314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688880.297:4259525): proctitle=646F7665636F742F61757468002D77
type=USER_END msg=audit(1674688881.171:4259526): pid=22378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688881.171:4259527): pid=22378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688881.378:4259528): pid=22394 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688881.378:4259529): pid=22394 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674688881.379:4259530): pid=22394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688881.394:4259531): pid=22394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688882.534:4259532): pid=22394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688882.534:4259533): pid=22394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688883.346:4259534): pid=22406 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674688883.346:4259535): pid=22406 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206364202F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C2026262074696D656F7574203630202F7573722F6C6F63616C2F62696E2F706870202D722027726571756972652027222722272F7573722F6C6F63616C2F6370616E656C2F33726470617274792F77702D746F6F6C6B69742F706C69622F76656E646F722F77702D636C692F7770742D77702D636C692E70687027222722273B27202D6420736166655F6D6F64653D6F6666202D6420646973706C61795F6572726F72733D6F6E202D64206F7063616368652E656E61626C655F636C693D6F6666202D64206F70656E5F626173656469723D202D64206572726F725F7265706F7274696E673D333431202D64206D61785F657865637574696F6E5F74696D653D3630202D2D6E6F2D686561646572202D2D202D2D706174683D2F686F6D652F7777777265736F7572636568756E74652F7075626C69635F68746D6C202D2D6E6F2D636F6C6F7220636F726520636865636B2D757064617465202D2D666F726D61743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674688883.346:4259536): pid=22406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674688883.361:4259537): pid=22406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674688884.487:4259538): pid=22406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674688884.487:4259539): pid=22406 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwresourcehunte" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674688921.252:4259540): pid=22537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688921.252:4259541): pid=22537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688921.253:4259542): pid=22537 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258776 res=1
type=USER_START msg=audit(1674688921.267:4259543): pid=22537 uid=0 auid=1055 ses=258776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688921.268:4259544): pid=22537 uid=0 auid=1055 ses=258776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688921.510:4259545): pid=22537 uid=0 auid=1055 ses=258776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688921.512:4259546): pid=22537 uid=0 auid=1055 ses=258776 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674688927.056:4259547): avc: denied { name_connect } for pid=21668 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674688927.056:4259547): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd55ef1ce0 a2=10 a3=7ffd55ef1cdc items=0 ppid=5547 pid=21668 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674688927.056:4259547): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674688981.527:4259548): pid=22732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674688981.528:4259549): pid=22732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674688981.528:4259550): pid=22732 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258777 res=1
type=USER_START msg=audit(1674688981.540:4259551): pid=22732 uid=0 auid=1055 ses=258777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674688981.542:4259552): pid=22732 uid=0 auid=1055 ses=258777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674688981.796:4259553): pid=22732 uid=0 auid=1055 ses=258777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674688981.797:4259554): pid=22732 uid=0 auid=1055 ses=258777 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674689020.127:4259555): avc: denied { read } for pid=22860 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674689020.127:4259555): avc: denied { open } for pid=22860 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689020.127:4259555): arch=c000003e syscall=2 success=yes exit=18 a0=55e75d060f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=22860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689020.127:4259555): proctitle="dovecot/auth"
type=AVC msg=audit(1674689020.127:4259556): avc: denied { getattr } for pid=22860 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689020.127:4259556): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffa90086a0 a2=7fffa90086a0 a3=fffffc00 items=0 ppid=5547 pid=22860 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689020.127:4259556): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674689025.638:4259557): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674689025.638:4259557): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae769d5d010 items=0 ppid=22874 pid=22879 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689025.638:4259557): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E312E37362E323236002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543233
type=USER_ACCT msg=audit(1674689041.812:4259558): pid=22928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689041.812:4259559): pid=22928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689041.814:4259560): pid=22928 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258778 res=1
type=USER_START msg=audit(1674689041.832:4259561): pid=22928 uid=0 auid=1055 ses=258778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689041.833:4259562): pid=22928 uid=0 auid=1055 ses=258778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689042.105:4259563): pid=22928 uid=0 auid=1055 ses=258778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689042.107:4259564): pid=22928 uid=0 auid=1055 ses=258778 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674689072.431:4259565): avc: denied { write } for pid=22942 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674689072.431:4259565): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe5c7116f0 a2=6e a3=63d1ba30 items=0 ppid=5547 pid=22942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689072.431:4259565): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674689101.125:4259567): pid=23245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689101.125:4259566): pid=23244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689101.125:4259568): pid=23245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689101.125:4259569): pid=23244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689101.126:4259570): pid=23244 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258779 res=1
type=LOGIN msg=audit(1674689101.126:4259571): pid=23245 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258780 res=1
type=USER_START msg=audit(1674689101.158:4259572): pid=23245 uid=0 auid=1055 ses=258780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689101.160:4259573): pid=23245 uid=0 auid=1055 ses=258780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674689101.160:4259574): pid=23244 uid=0 auid=0 ses=258779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689101.162:4259575): pid=23244 uid=0 auid=0 ses=258779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689101.512:4259576): pid=23245 uid=0 auid=1055 ses=258780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689101.517:4259577): pid=23245 uid=0 auid=1055 ses=258780 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689104.519:4259578): pid=23244 uid=0 auid=0 ses=258779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689104.520:4259579): pid=23244 uid=0 auid=0 ses=258779 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674689158.835:4259580): avc: denied { name_connect } for pid=22860 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674689158.835:4259580): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffa9008490 a2=10 a3=7fffa900848c items=0 ppid=5547 pid=22860 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689158.835:4259580): proctitle="dovecot/auth"
type=USER_ACCT msg=audit(1674689161.577:4259581): pid=23465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689161.577:4259582): pid=23465 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689161.578:4259583): pid=23465 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258781 res=1
type=USER_START msg=audit(1674689161.595:4259584): pid=23465 uid=0 auid=1055 ses=258781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689161.597:4259585): pid=23465 uid=0 auid=1055 ses=258781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689161.883:4259586): pid=23465 uid=0 auid=1055 ses=258781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689161.887:4259587): pid=23465 uid=0 auid=1055 ses=258781 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689172.998:4259588): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689172.998:4259589): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689172.998:4259590): pid=23540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23540 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689173.036:4259591): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23540 suid=74 rport=58866 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689173.036:4259592): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23540 suid=74 rport=58866 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=? res=success'
type=USER_AUTH msg=audit(1674689173.349:4259593): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=157.245.207.215 addr=157.245.207.215 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689174.959:4259594): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689175.000:4259595): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23540 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689175.000:4259596): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23540 suid=74 rport=58866 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689175.002:4259597): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689175.002:4259598): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689175.002:4259599): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23539 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689175.002:4259600): pid=23539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674689221.908:4259601): pid=23682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689221.908:4259602): pid=23682 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689221.909:4259603): pid=23682 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258782 res=1
type=USER_START msg=audit(1674689221.925:4259604): pid=23682 uid=0 auid=1055 ses=258782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689221.927:4259605): pid=23682 uid=0 auid=1055 ses=258782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689222.168:4259606): pid=23682 uid=0 auid=1055 ses=258782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689222.170:4259607): pid=23682 uid=0 auid=1055 ses=258782 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689272.383:4259608): pid=23848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689272.383:4259609): pid=23848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689272.383:4259610): pid=23848 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23848 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689272.455:4259611): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23848 suid=74 rport=51584 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.251.16.224 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689272.455:4259612): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23848 suid=74 rport=51584 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.251.16.224 terminal=? res=success'
type=USER_AUTH msg=audit(1674689272.720:4259613): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.251.16.224 addr=43.251.16.224 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689274.586:4259614): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.251.16.224 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689274.661:4259615): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23848 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689274.661:4259616): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23848 suid=74 rport=51584 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.251.16.224 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689274.664:4259617): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689274.664:4259618): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689274.664:4259619): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23847 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689274.664:4259620): pid=23847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.251.16.224 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674689281.181:4259621): pid=23872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689281.181:4259622): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689281.181:4259623): pid=23872 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689281.181:4259624): pid=23873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689281.182:4259625): pid=23873 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258783 res=1
type=LOGIN msg=audit(1674689281.182:4259626): pid=23872 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258784 res=1
type=USER_START msg=audit(1674689281.211:4259627): pid=23872 uid=0 auid=0 ses=258784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674689281.211:4259628): pid=23873 uid=0 auid=1055 ses=258783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689281.213:4259629): pid=23872 uid=0 auid=0 ses=258784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689281.213:4259630): pid=23873 uid=0 auid=1055 ses=258783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689281.253:4259631): pid=23872 uid=0 auid=0 ses=258784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689281.255:4259632): pid=23872 uid=0 auid=0 ses=258784 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689281.447:4259633): pid=23873 uid=0 auid=1055 ses=258783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689281.448:4259634): pid=23873 uid=0 auid=1055 ses=258783 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689297.935:4259635): pid=23936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689297.935:4259636): pid=23936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689297.935:4259637): pid=23936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23936 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689297.971:4259638): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23936 suid=74 rport=48210 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689297.972:4259639): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=23936 suid=74 rport=48210 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=? res=success'
type=USER_AUTH msg=audit(1674689298.248:4259640): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=188.166.240.186 addr=188.166.240.186 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689300.686:4259641): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689300.725:4259642): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23936 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689300.725:4259643): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=23936 suid=74 rport=48210 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689300.726:4259644): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=23935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689300.726:4259645): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=23935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689300.726:4259646): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=23935 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689300.727:4259647): pid=23935 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674689341.461:4259648): pid=24065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689341.461:4259649): pid=24065 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689341.462:4259650): pid=24065 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258785 res=1
type=USER_START msg=audit(1674689341.476:4259651): pid=24065 uid=0 auid=1055 ses=258785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689341.477:4259652): pid=24065 uid=0 auid=1055 ses=258785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689341.741:4259653): pid=24065 uid=0 auid=1055 ses=258785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689341.743:4259654): pid=24065 uid=0 auid=1055 ses=258785 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689348.936:4259655): pid=24100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689348.936:4259656): pid=24100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689348.936:4259657): pid=24100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24100 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689349.116:4259658): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24100 suid=74 rport=41700 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.145.142.206 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689349.116:4259659): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24100 suid=74 rport=41700 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.145.142.206 terminal=? res=success'
type=USER_AUTH msg=audit(1674689349.959:4259660): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=31.145.142.206 addr=31.145.142.206 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689352.396:4259661): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.145.142.206 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689352.578:4259662): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24100 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689352.578:4259663): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24100 suid=74 rport=41700 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.145.142.206 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689352.579:4259664): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689352.580:4259665): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689352.580:4259666): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24099 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689352.580:4259667): pid=24099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.145.142.206 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689354.500:4259668): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689354.500:4259669): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689354.500:4259670): pid=24128 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24128 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689354.855:4259671): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24128 suid=74 rport=48126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=177.220.131.211 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689354.855:4259672): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24128 suid=74 rport=48126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=177.220.131.211 terminal=? res=success'
type=USER_AUTH msg=audit(1674689356.372:4259673): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=177.220.131.211 addr=177.220.131.211 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689358.439:4259674): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=177.220.131.211 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689358.794:4259675): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24128 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689358.794:4259676): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24128 suid=74 rport=48126 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=177.220.131.211 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689358.795:4259677): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689358.795:4259678): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689358.795:4259679): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24127 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689358.795:4259680): pid=24127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=177.220.131.211 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689368.185:4259681): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689368.185:4259682): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689368.185:4259683): pid=24184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24184 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689368.223:4259684): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24184 suid=74 rport=53654 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689368.223:4259685): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24184 suid=74 rport=53654 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=? res=success'
type=USER_AUTH msg=audit(1674689368.489:4259686): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=159.65.12.104 addr=159.65.12.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689370.535:4259687): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689370.574:4259688): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24184 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689370.574:4259689): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24184 suid=74 rport=53654 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689370.575:4259690): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689370.575:4259691): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689370.575:4259692): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689370.575:4259693): pid=24183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=ssh res=failed'
type=AVC msg=audit(1674689370.734:4259694): avc: denied { read } for pid=24194 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674689370.734:4259694): avc: denied { open } for pid=24194 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689370.734:4259694): arch=c000003e syscall=2 success=yes exit=18 a0=56434bd0ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=24194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689370.734:4259694): proctitle="dovecot/auth"
type=AVC msg=audit(1674689370.734:4259695): avc: denied { getattr } for pid=24194 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689370.734:4259695): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffd2ecc9920 a2=7ffd2ecc9920 a3=fffffc00 items=0 ppid=5547 pid=24194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689370.734:4259695): proctitle="dovecot/auth"
type=AVC msg=audit(1674689372.952:4259696): avc: denied { name_connect } for pid=24194 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674689372.952:4259696): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffd2ecc9710 a2=10 a3=7ffd2ecc970c items=0 ppid=5547 pid=24194 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689372.952:4259696): proctitle="dovecot/auth"
type=AVC msg=audit(1674689372.981:4259697): avc: denied { write } for pid=24202 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674689372.981:4259697): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc66668b00 a2=6e a3=63d1bb5c items=0 ppid=5547 pid=24202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689372.981:4259697): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674689373.707:4259698): avc: denied { read append } for pid=24210 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674689373.707:4259698): avc: denied { open } for pid=24210 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689373.707:4259698): arch=c000003e syscall=2 success=yes exit=8 a0=55a1399dba60 a1=402 a2=7fff45a7a2f0 a3=7fff45a79d60 items=0 ppid=5547 pid=24210 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689373.707:4259698): proctitle="dovecot/imap"
type=AVC msg=audit(1674689373.707:4259699): avc: denied { getattr } for pid=24210 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689373.707:4259699): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff45a7a250 a2=7fff45a7a250 a3=7fff45a79ca0 items=0 ppid=5547 pid=24210 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689373.707:4259699): proctitle="dovecot/imap"
type=AVC msg=audit(1674689373.707:4259700): avc: denied { write } for pid=24210 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689373.707:4259700): arch=c000003e syscall=2 success=yes exit=10 a0=55a1399e0990 a1=2 a2=7fff45a79ff0 a3=7fff45a79aa0 items=0 ppid=5547 pid=24210 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689373.707:4259700): proctitle="dovecot/imap"
type=AVC msg=audit(1674689373.707:4259701): avc: denied { lock } for pid=24210 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689373.707:4259701): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff45a79ef0 a3=63d1bb5d items=0 ppid=5547 pid=24210 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689373.707:4259701): proctitle="dovecot/imap"
type=AVC msg=audit(1674689373.707:4259702): avc: denied { read } for pid=24210 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674689373.707:4259702): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55a139a09300 a2=90800 a3=0 items=0 ppid=5547 pid=24210 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689373.707:4259702): proctitle="dovecot/imap"
type=AVC msg=audit(1674689373.708:4259703): avc: denied { getattr } for pid=24210 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689373.708:4259703): arch=c000003e syscall=4 success=yes exit=0 a0=55a1399cba60 a1=7fff45a7a2a0 a2=7fff45a7a2a0 a3=6f632e6f72676173 items=0 ppid=5547 pid=24210 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689373.708:4259703): proctitle="dovecot/imap"
type=AVC msg=audit(1674689381.315:4259704): avc: denied { write } for pid=24331 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674689381.315:4259704): arch=c000003e syscall=21 success=yes exit=0 a0=558be67f24c0 a1=2 a2=7b48 a3=7ffe9924e7a0 items=0 ppid=5547 pid=24331 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689381.315:4259704): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674689393.283:4259705): pid=24363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689393.283:4259706): pid=24363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689393.283:4259707): pid=24363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24363 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689393.560:4259708): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24363 suid=74 rport=55880 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689393.560:4259709): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24363 suid=74 rport=55880 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=? res=success'
type=USER_AUTH msg=audit(1674689394.734:4259710): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=80.251.216.10 addr=80.251.216.10 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689397.016:4259711): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689397.261:4259712): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24363 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689397.262:4259713): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24363 suid=74 rport=55880 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689397.263:4259714): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689397.263:4259715): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689397.263:4259716): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24362 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689397.263:4259717): pid=24362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674689399.666:4259718): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689399.666:4259718): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b8b5f931010 items=0 ppid=24384 pid=24389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689399.666:4259718): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132332E3135332E39392E313436002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=USER_ACCT msg=audit(1674689401.763:4259721): pid=24402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689401.763:4259720): pid=24403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689401.763:4259719): pid=24401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689401.763:4259723): pid=24402 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689401.763:4259722): pid=24401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689401.763:4259724): pid=24403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689401.764:4259725): pid=24401 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258786 res=1
type=LOGIN msg=audit(1674689401.764:4259726): pid=24403 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258787 res=1
type=LOGIN msg=audit(1674689401.765:4259727): pid=24402 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258788 res=1
type=USER_START msg=audit(1674689401.820:4259728): pid=24401 uid=0 auid=0 ses=258786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674689401.820:4259729): pid=24402 uid=0 auid=0 ses=258788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674689401.821:4259730): pid=24403 uid=0 auid=1055 ses=258787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689401.824:4259731): pid=24401 uid=0 auid=0 ses=258786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689401.824:4259732): pid=24402 uid=0 auid=0 ses=258788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689401.825:4259733): pid=24403 uid=0 auid=1055 ses=258787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689401.862:4259734): pid=24401 uid=0 auid=0 ses=258786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689401.867:4259735): pid=24401 uid=0 auid=0 ses=258786 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689402.184:4259736): pid=24403 uid=0 auid=1055 ses=258787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689402.187:4259737): pid=24403 uid=0 auid=1055 ses=258787 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674689405.036:4259738): avc: denied { write } for pid=24202 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674689405.036:4259738): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc66668b00 a2=6e a3=63d1bb7d items=0 ppid=5547 pid=24202 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689405.036:4259738): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674689405.190:4259739): pid=24402 uid=0 auid=0 ses=258788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689405.191:4259740): pid=24402 uid=0 auid=0 ses=258788 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689424.792:4259741): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689424.792:4259742): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689424.792:4259743): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24499 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689424.963:4259744): pid=24498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24499 suid=74 rport=36158 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.145.142.206 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689424.963:4259745): pid=24498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24499 suid=74 rport=36158 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=31.145.142.206 terminal=? res=success'
type=USER_AUTH msg=audit(1674689425.786:4259746): pid=24498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=31.145.142.206 addr=31.145.142.206 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689426.788:4259747): pid=24532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689426.788:4259748): pid=24532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689426.788:4259749): pid=24532 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24532 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689426.826:4259750): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24532 suid=74 rport=51348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689426.826:4259751): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24532 suid=74 rport=51348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=? res=success'
type=USER_AUTH msg=audit(1674689427.100:4259752): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=188.166.240.186 addr=188.166.240.186 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674689427.952:4259753): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689427.952:4259753): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f13db0df010 items=0 ppid=24534 pid=24540 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689427.952:4259753): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674689427.957:4259754): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689427.957:4259754): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0f8e9f5010 items=0 ppid=24534 pid=24541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689427.957:4259754): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674689427.961:4259755): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674689427.961:4259755): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7efe0501f010 items=0 ppid=24534 pid=24542 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689427.961:4259755): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674689427.966:4259756): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689427.966:4259756): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcbae581010 items=0 ppid=24534 pid=24543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689427.966:4259756): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674689428.293:4259757): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689428.293:4259757): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe6ce26f010 items=0 ppid=24534 pid=24551 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689428.293:4259757): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138382E3136362E35322E323332002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689428.299:4259758): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689428.299:4259758): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7faa81328010 items=0 ppid=24534 pid=24552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689428.299:4259758): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138382E3136362E35322E323332002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674689428.305:4259759): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674689428.305:4259759): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fa40f90a010 items=0 ppid=24534 pid=24553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689428.305:4259759): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730033312E3134352E3134322E323036002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689428.311:4259760): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689428.311:4259760): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc6a1842010 items=0 ppid=24534 pid=24554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689428.311:4259760): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640033312E3134352E3134322E323036002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674689428.325:4259761): pid=24498 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=31.145.142.206 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689429.247:4259762): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689429.287:4259763): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24532 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689429.287:4259764): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24532 suid=74 rport=51348 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689429.289:4259765): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689429.289:4259766): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689429.289:4259767): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24531 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689429.289:4259768): pid=24531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=188.166.240.186 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689430.677:4259769): pid=24569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689430.677:4259770): pid=24569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689430.677:4259771): pid=24569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24569 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689430.749:4259772): pid=24568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24569 suid=74 rport=54866 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.251.16.224 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689430.749:4259773): pid=24568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24569 suid=74 rport=54866 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.251.16.224 terminal=? res=success'
type=USER_AUTH msg=audit(1674689431.013:4259774): pid=24568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=43.251.16.224 addr=43.251.16.224 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674689431.956:4259775): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689431.956:4259775): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff4871d9010 items=0 ppid=24584 pid=24590 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689431.956:4259775): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674689431.962:4259776): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689431.962:4259776): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3317d46010 items=0 ppid=24584 pid=24591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689431.962:4259776): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674689431.967:4259777): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674689431.967:4259777): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff813898010 items=0 ppid=24584 pid=24592 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689431.967:4259777): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674689431.971:4259778): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689431.971:4259778): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb40c798010 items=0 ppid=24584 pid=24593 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689431.971:4259778): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674689432.090:4259779): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689432.090:4259779): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f62e7445010 items=0 ppid=24585 pid=24602 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.090:4259779): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674689432.095:4259780): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689432.095:4259780): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fcd67b1f010 items=0 ppid=24585 pid=24603 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.095:4259780): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674689432.100:4259781): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674689432.100:4259781): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4e887be010 items=0 ppid=24585 pid=24604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.100:4259781): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674689432.105:4259782): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689432.105:4259782): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f826bdde010 items=0 ppid=24585 pid=24605 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.105:4259782): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674689432.300:4259783): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689432.300:4259783): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1cfba81010 items=0 ppid=24584 pid=24613 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.300:4259783): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003136312E33352E3131372E313932002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689432.306:4259784): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689432.306:4259784): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb59c478010 items=0 ppid=24584 pid=24614 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.306:4259784): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003136312E33352E3131372E313932002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674689432.313:4259785): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674689432.313:4259785): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f721c7c7010 items=0 ppid=24584 pid=24616 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.313:4259785): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003138382E3136362E3234302E313836002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689432.320:4259786): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689432.320:4259786): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff6ead44010 items=0 ppid=24584 pid=24617 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.320:4259786): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003138382E3136362E3234302E313836002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674689432.439:4259787): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689432.439:4259787): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fabf0d09010 items=0 ppid=24585 pid=24625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.439:4259787): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131372E3130322E36392E313436002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689432.445:4259788): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689432.445:4259788): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f28658ba010 items=0 ppid=24585 pid=24626 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.445:4259788): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131372E3130322E36392E313436002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674689432.452:4259789): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674689432.452:4259789): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fca309c1010 items=0 ppid=24585 pid=24627 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.452:4259789): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034332E3235312E31362E323234002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689432.458:4259790): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689432.458:4259790): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fba90067010 items=0 ppid=24585 pid=24628 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689432.458:4259790): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034332E3235312E31362E323234002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674689432.571:4259791): pid=24568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.251.16.224 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689437.175:4259792): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689437.175:4259793): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689437.175:4259794): pid=24649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24649 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689437.364:4259795): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=24649 suid=74 rport=47194 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689437.364:4259796): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=24649 suid=74 rport=47194 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=USER_AUTH msg=audit(1674689438.095:4259797): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=144.91.110.8 addr=144.91.110.8 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689440.418:4259798): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689440.559:4259799): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24649 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689440.559:4259800): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24649 suid=74 rport=47194 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689440.560:4259801): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689440.560:4259802): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689440.561:4259803): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24644 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689440.561:4259804): pid=24644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=144.91.110.8 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689443.433:4259805): pid=24667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689443.433:4259806): pid=24667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689443.433:4259807): pid=24667 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24667 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689443.470:4259808): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24667 suid=74 rport=38502 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689443.470:4259809): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24667 suid=74 rport=38502 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=? res=success'
type=USER_AUTH msg=audit(1674689443.748:4259810): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=157.245.207.215 addr=157.245.207.215 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689445.759:4259811): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689445.800:4259812): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24667 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689445.800:4259813): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24667 suid=74 rport=38502 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689445.801:4259814): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689445.801:4259815): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689445.801:4259816): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24666 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689445.801:4259817): pid=24666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=157.245.207.215 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674689446.935:4259818): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689446.935:4259818): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f70a8be3010 items=0 ppid=24690 pid=24693 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689446.935:4259818): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674689446.939:4259819): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689446.939:4259819): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f77bf2b6010 items=0 ppid=24690 pid=24694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689446.939:4259819): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674689446.943:4259820): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674689446.943:4259820): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc8a4c70010 items=0 ppid=24690 pid=24695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689446.943:4259820): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674689446.946:4259821): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689446.946:4259821): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f6faf865010 items=0 ppid=24690 pid=24696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689446.946:4259821): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674689447.242:4259822): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689447.242:4259822): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3df63e9010 items=0 ppid=24690 pid=24704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689447.242:4259822): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730034322E3131392E3131312E313535002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689447.249:4259823): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689447.249:4259823): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2cf47e3010 items=0 ppid=24690 pid=24705 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689447.249:4259823): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640034322E3131392E3131312E313535002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674689447.255:4259824): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674689447.255:4259824): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fca1e710010 items=0 ppid=24690 pid=24706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689447.255:4259824): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003135372E3234352E3230372E323135002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689447.261:4259825): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689447.261:4259825): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f80e1815010 items=0 ppid=24690 pid=24707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689447.261:4259825): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003135372E3234352E3230372E323135002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674689461.211:4259826): pid=24747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689461.211:4259827): pid=24747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689461.212:4259828): pid=24747 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258789 res=1
type=USER_START msg=audit(1674689461.230:4259829): pid=24747 uid=0 auid=1055 ses=258789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689461.232:4259830): pid=24747 uid=0 auid=1055 ses=258789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689461.538:4259831): pid=24747 uid=0 auid=1055 ses=258789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689461.540:4259832): pid=24747 uid=0 auid=1055 ses=258789 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689462.326:4259833): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689462.326:4259834): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689462.326:4259835): pid=24770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24770 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689462.363:4259836): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24770 suid=74 rport=49296 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689462.363:4259837): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24770 suid=74 rport=49296 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=? res=success'
type=USER_AUTH msg=audit(1674689462.660:4259838): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=159.65.12.104 addr=159.65.12.104 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689465.278:4259839): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689465.319:4259840): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24770 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689465.319:4259841): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24770 suid=74 rport=49296 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689465.321:4259842): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689465.321:4259843): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689465.321:4259844): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24769 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689465.321:4259845): pid=24769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=159.65.12.104 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674689467.048:4259846): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689467.048:4259846): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc833de9010 items=0 ppid=24792 pid=24795 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689467.048:4259846): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674689467.052:4259847): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689467.052:4259847): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f63447f5010 items=0 ppid=24792 pid=24796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689467.052:4259847): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674689467.057:4259848): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674689467.057:4259848): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1518867010 items=0 ppid=24792 pid=24797 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689467.057:4259848): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674689467.062:4259849): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689467.062:4259849): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7ee3608010 items=0 ppid=24792 pid=24798 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689467.062:4259849): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674689467.411:4259850): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689467.411:4259850): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1260d47010 items=0 ppid=24792 pid=24806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689467.411:4259850): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730038302E39342E39352E323034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689467.417:4259851): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689467.417:4259851): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4e4bf0b010 items=0 ppid=24792 pid=24807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689467.417:4259851): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640038302E39342E39352E323034002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674689467.422:4259852): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674689467.422:4259852): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff4e9d9b010 items=0 ppid=24792 pid=24808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689467.422:4259852): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003135392E36352E31322E313034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689467.427:4259853): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689467.427:4259853): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd58cefd010 items=0 ppid=24792 pid=24809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689467.427:4259853): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003135392E36352E31322E313034002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674689495.284:4259854): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689495.285:4259855): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689495.285:4259856): pid=24915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24915 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689495.587:4259857): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24915 suid=74 rport=56284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689495.587:4259858): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24915 suid=74 rport=56284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=? res=success'
type=USER_AUTH msg=audit(1674689496.829:4259859): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=80.251.216.10 addr=80.251.216.10 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689498.450:4259860): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689498.781:4259861): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24915 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689498.781:4259862): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=24915 suid=74 rport=56284 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689498.782:4259863): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689498.783:4259864): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689498.783:4259865): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24914 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689498.783:4259866): pid=24914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=80.251.216.10 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674689502.029:4259867): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689502.029:4259867): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f3eeee4e010 items=0 ppid=24942 pid=24945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689502.029:4259867): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674689502.034:4259868): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689502.034:4259868): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f632a5d1010 items=0 ppid=24942 pid=24946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689502.034:4259868): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674689502.039:4259869): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674689502.039:4259869): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f32df1ca010 items=0 ppid=24942 pid=24947 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689502.039:4259869): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674689502.044:4259870): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689502.044:4259870): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0d7c4d9010 items=0 ppid=24942 pid=24948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689502.044:4259870): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674689502.376:4259871): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689502.376:4259871): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbbe0ad0010 items=0 ppid=24942 pid=24956 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689502.376:4259871): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003131342E33332E3131322E3939002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689502.382:4259872): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689502.382:4259872): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f477de8e010 items=0 ppid=24942 pid=24957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689502.382:4259872): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003131342E33332E3131322E3939002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674689502.388:4259873): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674689502.388:4259873): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff5bc698010 items=0 ppid=24942 pid=24958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689502.388:4259873): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038302E3235312E3231362E3130002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689502.394:4259874): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689502.394:4259874): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f567f648010 items=0 ppid=24942 pid=24959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689502.394:4259874): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038302E3235312E3231362E3130002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674689514.044:4259875): pid=24999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=24999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689514.045:4259876): pid=24999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=24999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689514.045:4259877): pid=24999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=24999 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689514.409:4259878): pid=24998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24999 suid=74 rport=50908 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=177.220.131.211 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689514.409:4259879): pid=24998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=24999 suid=74 rport=50908 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=177.220.131.211 terminal=? res=success'
type=USER_AUTH msg=audit(1674689515.961:4259880): pid=24998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=177.220.131.211 addr=177.220.131.211 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674689517.020:4259881): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689517.020:4259881): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5db6e5e010 items=0 ppid=25012 pid=25015 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689517.020:4259881): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674689517.025:4259882): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689517.025:4259882): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9a941e8010 items=0 ppid=25012 pid=25016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689517.025:4259882): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674689517.029:4259883): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674689517.029:4259883): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdce228c010 items=0 ppid=25012 pid=25017 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689517.029:4259883): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674689517.034:4259884): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689517.034:4259884): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f73bf259010 items=0 ppid=25012 pid=25018 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689517.034:4259884): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674689517.346:4259885): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689517.346:4259885): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f593698d010 items=0 ppid=25012 pid=25026 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689517.346:4259885): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003230392E3134312E35362E3438002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689517.353:4259886): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689517.353:4259886): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f57e8c7f010 items=0 ppid=25012 pid=25027 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689517.353:4259886): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003230392E3134312E35362E3438002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674689517.360:4259887): table=filter family=2 entries=1039
type=SYSCALL msg=audit(1674689517.360:4259887): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f834fefb010 items=0 ppid=25012 pid=25028 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689517.360:4259887): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003137372E3232302E3133312E323131002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674689517.367:4259888): table=filter family=2 entries=1040
type=SYSCALL msg=audit(1674689517.367:4259888): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7da7fbf010 items=0 ppid=25012 pid=25029 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689517.367:4259888): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003137372E3232302E3133312E323131002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674689517.520:4259889): pid=24998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=177.220.131.211 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674689521.558:4259890): pid=25047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689521.558:4259891): pid=25047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689521.560:4259892): pid=25047 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258790 res=1
type=USER_START msg=audit(1674689521.580:4259893): pid=25047 uid=0 auid=1055 ses=258790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689521.582:4259894): pid=25047 uid=0 auid=1055 ses=258790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689521.857:4259895): pid=25047 uid=0 auid=1055 ses=258790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689521.861:4259896): pid=25047 uid=0 auid=1055 ses=258790 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674689570.869:4259897): avc: denied { read } for pid=25207 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674689570.869:4259897): avc: denied { open } for pid=25207 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689570.869:4259897): arch=c000003e syscall=2 success=yes exit=18 a0=55dcffb54f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=25207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689570.869:4259897): proctitle="dovecot/auth"
type=AVC msg=audit(1674689570.869:4259898): avc: denied { getattr } for pid=25207 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689570.869:4259898): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcbea1cf30 a2=7ffcbea1cf30 a3=fffffc00 items=0 ppid=5547 pid=25207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689570.869:4259898): proctitle="dovecot/auth"
type=AVC msg=audit(1674689572.425:4259899): avc: denied { name_connect } for pid=25207 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674689572.425:4259899): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcbea1cd20 a2=10 a3=7ffcbea1cd1c items=0 ppid=5547 pid=25207 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689572.425:4259899): proctitle="dovecot/auth"
type=AVC msg=audit(1674689572.455:4259900): avc: denied { write } for pid=25212 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674689572.455:4259900): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff15f5d290 a2=6e a3=63d1bc24 items=0 ppid=5547 pid=25212 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689572.455:4259900): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674689581.876:4259901): pid=25249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689581.877:4259902): pid=25249 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689581.877:4259903): pid=25249 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258791 res=1
type=USER_START msg=audit(1674689581.891:4259904): pid=25249 uid=0 auid=1055 ses=258791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689581.893:4259905): pid=25249 uid=0 auid=1055 ses=258791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689582.145:4259906): pid=25249 uid=0 auid=1055 ses=258791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689582.148:4259907): pid=25249 uid=0 auid=1055 ses=258791 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689641.160:4259908): pid=25431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689641.160:4259909): pid=25431 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689641.160:4259910): pid=25431 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258792 res=1
type=USER_START msg=audit(1674689641.173:4259911): pid=25431 uid=0 auid=1055 ses=258792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689641.175:4259912): pid=25431 uid=0 auid=1055 ses=258792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689641.450:4259913): pid=25431 uid=0 auid=1055 ses=258792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689641.452:4259914): pid=25431 uid=0 auid=1055 ses=258792 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689653.790:4259915): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689653.791:4259916): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689653.791:4259917): pid=25481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25481 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689653.870:4259918): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25481 suid=74 rport=45772 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689653.870:4259919): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25481 suid=74 rport=45772 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=USER_AUTH msg=audit(1674689654.297:4259920): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.115.24.11 addr=103.115.24.11 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689656.273:4259921): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689656.356:4259922): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25481 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689656.356:4259923): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25481 suid=74 rport=45772 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689656.358:4259924): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25480 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689656.358:4259925): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25480 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689656.358:4259926): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25480 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689656.358:4259927): pid=25480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689657.229:4259928): pid=25493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689657.229:4259929): pid=25493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689657.229:4259930): pid=25493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25493 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689657.320:4259931): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25493 suid=74 rport=49384 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689657.320:4259932): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25493 suid=74 rport=49384 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=USER_AUTH msg=audit(1674689657.786:4259933): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=165.154.229.36 addr=165.154.229.36 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689659.506:4259934): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689659.600:4259935): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25493 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689659.600:4259936): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25493 suid=74 rport=49384 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689659.601:4259937): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689659.601:4259938): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689659.601:4259939): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25492 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689659.601:4259940): pid=25492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689684.253:4259941): pid=25584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689684.254:4259942): pid=25584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689684.254:4259943): pid=25584 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25584 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689684.565:4259944): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25584 suid=74 rport=37084 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689684.566:4259945): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25584 suid=74 rport=37084 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=? res=success'
type=USER_AUTH msg=audit(1674689685.911:4259946): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=190.144.14.170 addr=190.144.14.170 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689688.143:4259947): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689688.457:4259948): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25584 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689688.457:4259949): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25584 suid=74 rport=37084 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689688.458:4259950): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689688.458:4259951): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689688.458:4259952): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25583 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689688.458:4259953): pid=25583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674689701.469:4259954): pid=25636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689701.469:4259955): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689701.469:4259956): pid=25636 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689701.469:4259957): pid=25637 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689701.470:4259958): pid=25634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689701.470:4259959): pid=25634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689701.470:4259960): pid=25636 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258793 res=1
type=LOGIN msg=audit(1674689701.470:4259961): pid=25637 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258794 res=1
type=LOGIN msg=audit(1674689701.470:4259962): pid=25634 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258795 res=1
type=USER_ACCT msg=audit(1674689701.473:4259963): pid=25635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689701.474:4259964): pid=25635 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689701.474:4259965): pid=25635 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258796 res=1
type=USER_START msg=audit(1674689701.559:4259966): pid=25635 uid=0 auid=0 ses=258796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674689701.559:4259967): pid=25636 uid=0 auid=0 ses=258793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674689701.559:4259968): pid=25637 uid=0 auid=1055 ses=258794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689701.559:4259969): pid=25637 uid=0 auid=1055 ses=258794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689701.559:4259970): pid=25636 uid=0 auid=0 ses=258793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689701.559:4259971): pid=25635 uid=0 auid=0 ses=258796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674689701.564:4259972): pid=25634 uid=0 auid=0 ses=258795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689701.575:4259973): pid=25634 uid=0 auid=0 ses=258795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689701.690:4259974): pid=25635 uid=0 auid=0 ses=258796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689701.696:4259975): pid=25635 uid=0 auid=0 ses=258796 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689701.706:4259976): pid=25636 uid=0 auid=0 ses=258793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689701.707:4259977): pid=25636 uid=0 auid=0 ses=258793 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689701.964:4259978): pid=25637 uid=0 auid=1055 ses=258794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689701.967:4259979): pid=25637 uid=0 auid=1055 ses=258794 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689704.960:4259980): pid=25634 uid=0 auid=0 ses=258795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689704.962:4259981): pid=25634 uid=0 auid=0 ses=258795 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674689709.506:4259982): avc: denied { read } for pid=25716 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674689709.506:4259982): avc: denied { open } for pid=25716 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689709.506:4259982): arch=c000003e syscall=2 success=yes exit=18 a0=55d5b61fcf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=25716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689709.506:4259982): proctitle="dovecot/auth"
type=AVC msg=audit(1674689709.506:4259983): avc: denied { getattr } for pid=25716 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689709.506:4259983): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc28c6c950 a2=7ffc28c6c950 a3=fffffc00 items=0 ppid=5547 pid=25716 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689709.506:4259983): proctitle="dovecot/auth"
type=AVC msg=audit(1674689710.007:4259984): avc: denied { name_connect } for pid=25716 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674689710.007:4259984): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffc28c6c740 a2=10 a3=7ffc28c6c73c items=0 ppid=5547 pid=25716 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689710.007:4259984): proctitle="dovecot/auth"
type=AVC msg=audit(1674689710.035:4259985): avc: denied { write } for pid=25745 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674689710.035:4259985): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffee3715040 a2=6e a3=63d1bcae items=0 ppid=5547 pid=25745 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689710.035:4259985): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674689756.031:4259986): pid=25931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689756.032:4259987): pid=25931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689756.032:4259988): pid=25931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25931 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689756.271:4259989): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25931 suid=74 rport=45886 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689756.272:4259990): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=25931 suid=74 rport=45886 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=USER_AUTH msg=audit(1674689757.336:4259991): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=137.184.145.62 addr=137.184.145.62 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689759.453:4259992): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689759.696:4259993): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25931 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689759.696:4259994): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=25931 suid=74 rport=45886 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689759.698:4259995): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=25930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689759.698:4259996): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=25930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689759.699:4259997): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=25930 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689759.699:4259998): pid=25930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674689762.011:4259999): pid=25955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689762.011:4260000): pid=25955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689762.012:4260001): pid=25955 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258797 res=1
type=USER_START msg=audit(1674689762.047:4260002): pid=25955 uid=0 auid=1055 ses=258797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689762.049:4260003): pid=25955 uid=0 auid=1055 ses=258797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689762.388:4260004): pid=25955 uid=0 auid=1055 ses=258797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689762.390:4260005): pid=25955 uid=0 auid=1055 ses=258797 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689782.299:4260006): pid=26015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689782.299:4260007): pid=26015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689782.299:4260008): pid=26015 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26015 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689782.337:4260009): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26015 suid=74 rport=40636 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689782.337:4260010): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26015 suid=74 rport=40636 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=USER_AUTH msg=audit(1674689782.588:4260011): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=167.71.202.121 addr=167.71.202.121 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689785.137:4260012): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689785.177:4260013): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26015 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689785.177:4260014): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26015 suid=74 rport=40636 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689785.178:4260015): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689785.178:4260016): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689785.178:4260017): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26013 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689785.178:4260018): pid=26013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=ssh res=failed'
type=AVC msg=audit(1674689809.638:4260019): avc: denied { name_connect } for pid=25716 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674689809.638:4260019): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc28c6c740 a2=10 a3=7ffc28c6c73c items=0 ppid=5547 pid=25716 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689809.638:4260019): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674689810.740:4260020): table=filter family=2 entries=1041
type=SYSCALL msg=audit(1674689810.740:4260020): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b7bbcdd4010 items=0 ppid=26110 pid=26115 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689810.740:4260020): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E32362E32332E313337002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=AVC msg=audit(1674689818.479:4260021): avc: denied { write } for pid=26136 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674689818.479:4260021): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd2eb5fd40 a2=6e a3=63d1bd1a items=0 ppid=5547 pid=26136 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689818.479:4260021): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674689821.406:4260022): pid=26142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689821.406:4260023): pid=26142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689821.406:4260024): pid=26142 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258798 res=1
type=USER_START msg=audit(1674689821.426:4260025): pid=26142 uid=0 auid=1055 ses=258798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689821.428:4260026): pid=26142 uid=0 auid=1055 ses=258798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689821.711:4260027): pid=26142 uid=0 auid=1055 ses=258798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689821.713:4260028): pid=26142 uid=0 auid=1055 ses=258798 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689846.350:4260029): pid=26230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689846.350:4260030): pid=26230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689846.350:4260031): pid=26230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26230 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689846.603:4260032): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26230 suid=74 rport=33618 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689846.603:4260033): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26230 suid=74 rport=33618 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=? res=success'
type=USER_AUTH msg=audit(1674689847.716:4260034): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=172.87.22.100 addr=172.87.22.100 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689849.853:4260035): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689850.110:4260036): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26230 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689850.110:4260037): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26230 suid=74 rport=33618 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689850.112:4260038): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689850.112:4260039): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689850.112:4260040): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26229 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689850.112:4260041): pid=26229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674689875.786:4260042): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674689875.786:4260042): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b0a3f910010 items=0 ppid=26336 pid=26341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689875.786:4260042): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003130332E3133382E35342E3932002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32365432
type=CRYPTO_KEY_USER msg=audit(1674689876.848:4260043): pid=26346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689876.848:4260044): pid=26346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689876.848:4260045): pid=26346 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26346 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689876.873:4260046): pid=26348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689876.873:4260047): pid=26348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689876.873:4260048): pid=26348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26348 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689876.909:4260049): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26348 suid=74 rport=53552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689876.909:4260050): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26348 suid=74 rport=53552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689877.043:4260051): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26346 suid=74 rport=48058 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689877.043:4260052): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26346 suid=74 rport=48058 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=USER_AUTH msg=audit(1674689877.169:4260053): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.134.170.7 addr=43.134.170.7 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689877.919:4260054): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=87.248.226.146 addr=87.248.226.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689878.759:4260055): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689878.799:4260056): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26348 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689878.799:4260057): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26348 suid=74 rport=53552 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689878.799:4260058): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689878.799:4260059): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689878.799:4260060): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26347 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689878.800:4260061): pid=26347 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689879.509:4260062): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689879.706:4260063): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26346 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689879.706:4260064): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26346 suid=74 rport=48058 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689879.707:4260065): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689879.707:4260066): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689879.707:4260067): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26345 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689879.707:4260068): pid=26345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674689881.730:4260069): pid=26362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689881.730:4260070): pid=26362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689881.731:4260071): pid=26362 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258799 res=1
type=USER_START msg=audit(1674689881.748:4260072): pid=26362 uid=0 auid=1055 ses=258799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689881.749:4260073): pid=26362 uid=0 auid=1055 ses=258799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689882.055:4260074): pid=26362 uid=0 auid=1055 ses=258799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689882.069:4260075): pid=26362 uid=0 auid=1055 ses=258799 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689941.085:4260076): pid=26557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674689941.085:4260077): pid=26558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674689941.086:4260078): pid=26557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689941.086:4260080): pid=26557 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258800 res=1
type=CRED_ACQ msg=audit(1674689941.086:4260079): pid=26558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674689941.086:4260081): pid=26558 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258801 res=1
type=USER_START msg=audit(1674689941.118:4260082): pid=26558 uid=0 auid=1055 ses=258801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674689941.118:4260083): pid=26557 uid=0 auid=0 ses=258800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689941.119:4260084): pid=26558 uid=0 auid=1055 ses=258801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674689941.120:4260085): pid=26557 uid=0 auid=0 ses=258800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689941.391:4260086): pid=26558 uid=0 auid=1055 ses=258801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689941.393:4260087): pid=26558 uid=0 auid=1055 ses=258801 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674689942.472:4260088): pid=26557 uid=0 auid=0 ses=258800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674689942.476:4260089): pid=26557 uid=0 auid=0 ses=258800 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674689973.880:4260090): pid=26687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689973.880:4260091): pid=26687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689973.880:4260092): pid=26687 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26687 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689974.046:4260093): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26687 suid=74 rport=36698 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674689974.046:4260094): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26687 suid=74 rport=36698 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=? res=success'
type=USER_AUTH msg=audit(1674689974.830:4260095): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="lp" exe="/usr/sbin/sshd" hostname=51.178.139.28 addr=51.178.139.28 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674689976.736:4260096): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674689976.906:4260097): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26687 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689976.906:4260098): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26687 suid=74 rport=36698 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689976.907:4260099): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689976.907:4260100): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674689976.907:4260101): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26686 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674689976.907:4260102): pid=26686 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=ssh res=failed'
type=AVC msg=audit(1674689986.655:4260103): avc: denied { read } for pid=26720 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674689986.655:4260103): avc: denied { open } for pid=26720 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689986.655:4260103): arch=c000003e syscall=2 success=yes exit=18 a0=55b80878ef70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=26720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689986.655:4260103): proctitle="dovecot/auth"
type=AVC msg=audit(1674689986.656:4260104): avc: denied { getattr } for pid=26720 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674689986.656:4260104): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffb792c430 a2=7fffb792c430 a3=fffffc00 items=0 ppid=5547 pid=26720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689986.656:4260104): proctitle="dovecot/auth"
type=AVC msg=audit(1674689988.892:4260105): avc: denied { name_connect } for pid=26720 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674689988.892:4260105): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffb792c220 a2=10 a3=7fffb792c21c items=0 ppid=5547 pid=26720 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689988.892:4260105): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674689989.986:4260106): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674689989.986:4260106): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b2fff50a010 items=0 ppid=26734 pid=26739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674689989.986:4260106): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231392E3134322E3133342E313236002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236
type=USER_ACCT msg=audit(1674690001.493:4260107): pid=26769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690001.493:4260109): pid=26768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690001.493:4260108): pid=26767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690001.494:4260110): pid=26769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690001.494:4260111): pid=26768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690001.494:4260112): pid=26767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690001.495:4260113): pid=26769 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258802 res=1
type=LOGIN msg=audit(1674690001.495:4260114): pid=26767 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258803 res=1
type=LOGIN msg=audit(1674690001.495:4260115): pid=26768 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258804 res=1
type=USER_START msg=audit(1674690001.552:4260117): pid=26767 uid=0 auid=0 ses=258803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690001.552:4260116): pid=26769 uid=0 auid=1055 ses=258802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690001.552:4260118): pid=26768 uid=0 auid=0 ses=258804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690001.554:4260119): pid=26768 uid=0 auid=0 ses=258804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690001.554:4260120): pid=26767 uid=0 auid=0 ses=258803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690001.555:4260121): pid=26769 uid=0 auid=1055 ses=258802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690001.604:4260122): pid=26767 uid=0 auid=0 ses=258803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690001.607:4260123): pid=26767 uid=0 auid=0 ses=258803 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690001.875:4260124): pid=26769 uid=0 auid=1055 ses=258802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690001.881:4260125): pid=26769 uid=0 auid=1055 ses=258802 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674690003.838:4260126): avc: denied { name_connect } for pid=26720 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674690003.838:4260126): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffb792c220 a2=10 a3=7fffb792c21c items=0 ppid=5547 pid=26720 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690003.838:4260126): proctitle="dovecot/auth"
type=AVC msg=audit(1674690003.882:4260127): avc: denied { write } for pid=26800 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674690003.882:4260127): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd50048f70 a2=6e a3=63d1bdd3 items=0 ppid=5547 pid=26800 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690003.882:4260127): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674690004.892:4260128): pid=26768 uid=0 auid=0 ses=258804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690004.895:4260129): pid=26768 uid=0 auid=0 ses=258804 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674690029.931:4260130): pid=26904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690029.931:4260131): pid=26904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690029.931:4260132): pid=26904 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26904 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690030.159:4260133): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26904 suid=74 rport=40740 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690030.159:4260134): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26904 suid=74 rport=40740 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=USER_AUTH msg=audit(1674690031.179:4260135): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=137.184.145.62 addr=137.184.145.62 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690032.909:4260136): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690033.140:4260137): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26904 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690033.140:4260138): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26904 suid=74 rport=40740 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690033.141:4260139): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690033.141:4260140): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690033.141:4260141): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26903 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690033.141:4260142): pid=26903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690037.931:4260143): pid=26925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690037.931:4260144): pid=26925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690037.932:4260145): pid=26925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26925 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690038.118:4260146): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26925 suid=74 rport=50166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690038.118:4260147): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=26925 suid=74 rport=50166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=USER_AUTH msg=audit(1674690038.969:4260148): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=87.248.226.146 addr=87.248.226.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690040.996:4260149): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690041.187:4260150): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26925 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690041.187:4260151): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26925 suid=74 rport=50166 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690041.188:4260152): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=26924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690041.188:4260153): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=26924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690041.188:4260154): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=26924 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690041.188:4260155): pid=26924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690050.972:4260156): pid=27050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690050.973:4260157): pid=27050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690050.973:4260158): pid=27050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27050 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690051.277:4260159): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27050 suid=74 rport=36752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690051.278:4260160): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27050 suid=74 rport=36752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=? res=success'
type=USER_AUTH msg=audit(1674690052.597:4260161): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=190.144.14.170 addr=190.144.14.170 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690054.880:4260162): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690055.188:4260163): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27050 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690055.188:4260164): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27050 suid=74 rport=36752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690055.189:4260165): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690055.189:4260166): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690055.189:4260167): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27048 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690055.189:4260168): pid=27048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674690061.918:4260169): pid=27088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690061.918:4260170): pid=27088 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690061.919:4260171): pid=27088 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258805 res=1
type=USER_START msg=audit(1674690061.940:4260172): pid=27088 uid=0 auid=1055 ses=258805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690061.942:4260173): pid=27088 uid=0 auid=1055 ses=258805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690062.276:4260174): pid=27088 uid=0 auid=1055 ses=258805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690062.279:4260175): pid=27088 uid=0 auid=1055 ses=258805 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674690072.230:4260176): pid=27134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690072.230:4260177): pid=27134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690072.230:4260178): pid=27134 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27134 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690072.369:4260179): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27134 suid=74 rport=35184 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690072.369:4260180): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27134 suid=74 rport=35184 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=? res=success'
type=USER_AUTH msg=audit(1674690073.034:4260181): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=51.178.139.28 addr=51.178.139.28 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690074.864:4260182): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690075.006:4260183): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27134 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690075.006:4260184): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27134 suid=74 rport=35184 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690075.007:4260185): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690075.007:4260186): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690075.007:4260187): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27133 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690075.007:4260188): pid=27133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=51.178.139.28 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690077.829:4260189): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690077.829:4260189): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7addabb010 items=0 ppid=27153 pid=27156 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690077.829:4260189): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690077.835:4260190): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674690077.835:4260190): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f48dfa96010 items=0 ppid=27153 pid=27157 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690077.835:4260190): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690077.842:4260191): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690077.842:4260191): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb335f02010 items=0 ppid=27153 pid=27158 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690077.842:4260191): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690077.847:4260192): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674690077.847:4260192): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1904268010 items=0 ppid=27153 pid=27159 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690077.847:4260192): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690078.164:4260193): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690078.164:4260193): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f04453d7010 items=0 ppid=27153 pid=27167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690078.164:4260193): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730037312E3133302E35382E3931002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690078.171:4260194): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690078.171:4260194): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4cca58d010 items=0 ppid=27153 pid=27168 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690078.171:4260194): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640037312E3133302E35382E3931002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690078.177:4260195): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674690078.177:4260195): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fadcb33d010 items=0 ppid=27153 pid=27169 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690078.177:4260195): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730035312E3137382E3133392E3238002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690078.185:4260196): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690078.185:4260196): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff2435e9010 items=0 ppid=27153 pid=27170 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690078.185:4260196): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640035312E3137382E3133392E3238002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674690079.324:4260197): pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690079.324:4260198): pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690079.324:4260199): pid=27183 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27183 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690079.416:4260200): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27183 suid=74 rport=47146 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690079.416:4260201): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27183 suid=74 rport=47146 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=USER_AUTH msg=audit(1674690079.885:4260202): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=165.154.229.36 addr=165.154.229.36 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690081.011:4260203): pid=27190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690081.011:4260204): pid=27190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690081.011:4260205): pid=27190 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27190 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690081.269:4260206): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27190 suid=74 rport=50752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690081.269:4260207): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27190 suid=74 rport=50752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=? res=success'
type=USER_AUTH msg=audit(1674690081.871:4260208): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690081.967:4260209): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27183 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690081.967:4260210): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27183 suid=74 rport=47146 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690081.968:4260211): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690081.968:4260212): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690081.968:4260213): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27182 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690081.968:4260214): pid=27182 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690082.391:4260215): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=172.87.22.100 addr=172.87.22.100 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690085.125:4260216): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690085.381:4260217): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27190 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690085.381:4260218): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27190 suid=74 rport=50752 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690085.382:4260219): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690085.382:4260220): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690085.382:4260221): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27189 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690085.382:4260222): pid=27189 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690097.747:4260223): pid=27254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690097.747:4260224): pid=27254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690097.747:4260225): pid=27254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27254 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690097.997:4260226): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27254 suid=74 rport=33336 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690097.997:4260227): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27254 suid=74 rport=33336 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=USER_AUTH msg=audit(1674690099.096:4260228): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=137.184.145.62 addr=137.184.145.62 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690101.163:4260229): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690101.416:4260230): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27254 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690101.416:4260231): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27254 suid=74 rport=33336 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690101.417:4260232): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690101.417:4260233): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690101.417:4260234): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27253 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690101.417:4260235): pid=27253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=137.184.145.62 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690102.548:4260236): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690102.548:4260236): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4722ba5010 items=0 ppid=27270 pid=27273 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690102.548:4260236): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690102.553:4260237): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674690102.553:4260237): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4cfe0c4010 items=0 ppid=27270 pid=27274 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690102.553:4260237): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690102.557:4260238): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690102.557:4260238): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7e8702a010 items=0 ppid=27270 pid=27275 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690102.557:4260238): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690102.561:4260239): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674690102.561:4260239): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f7f9866b010 items=0 ppid=27270 pid=27276 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690102.561:4260239): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690102.853:4260240): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690102.853:4260240): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f00cb11e010 items=0 ppid=27270 pid=27284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690102.853:4260240): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003138322E32332E36332E3233002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690102.860:4260241): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690102.860:4260241): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f00d88ff010 items=0 ppid=27270 pid=27285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690102.860:4260241): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003138322E32332E36332E3233002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690102.867:4260242): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674690102.867:4260242): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0749e1c010 items=0 ppid=27270 pid=27286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690102.867:4260242): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003133372E3138342E3134352E3632002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690102.874:4260243): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690102.874:4260243): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb9e0d7a010 items=0 ppid=27270 pid=27287 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690102.874:4260243): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003133372E3138342E3134352E3632002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674690111.816:4260244): pid=27319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690111.817:4260245): pid=27319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690111.817:4260246): pid=27319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690111.981:4260247): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27319 suid=74 rport=37624 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690111.982:4260248): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27319 suid=74 rport=37624 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=USER_AUTH msg=audit(1674690112.741:4260249): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=87.248.226.146 addr=87.248.226.146 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690115.259:4260250): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690115.426:4260251): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27319 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690115.426:4260252): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27319 suid=74 rport=37624 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690115.427:4260253): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690115.427:4260254): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690115.427:4260255): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27318 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690115.427:4260256): pid=27318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=87.248.226.146 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690117.523:4260257): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690117.523:4260257): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f51d1c24010 items=0 ppid=27338 pid=27341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690117.523:4260257): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690117.529:4260258): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674690117.529:4260258): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f9137ded010 items=0 ppid=27338 pid=27342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690117.529:4260258): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690117.534:4260259): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690117.534:4260259): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff730607010 items=0 ppid=27338 pid=27343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690117.534:4260259): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690117.540:4260260): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674690117.540:4260260): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f65bc448010 items=0 ppid=27338 pid=27344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690117.540:4260260): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690117.840:4260261): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690117.840:4260261): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f26bf7d0010 items=0 ppid=27338 pid=27352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690117.840:4260261): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003230332E3130392E34362E313439002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690117.847:4260262): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690117.847:4260262): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f81f05f4010 items=0 ppid=27338 pid=27353 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690117.847:4260262): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003230332E3130392E34362E313439002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690117.853:4260263): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674690117.853:4260263): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f660fe6e010 items=0 ppid=27338 pid=27354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690117.853:4260263): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730038372E3234382E3232362E313436002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690117.858:4260264): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690117.858:4260264): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fdfc1640010 items=0 ppid=27338 pid=27355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690117.858:4260264): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640038372E3234382E3232362E313436002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674690121.300:4260265): pid=27370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690121.300:4260266): pid=27370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690121.301:4260267): pid=27370 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258806 res=1
type=USER_START msg=audit(1674690121.320:4260268): pid=27370 uid=0 auid=1055 ses=258806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690121.323:4260269): pid=27370 uid=0 auid=1055 ses=258806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690121.651:4260270): pid=27370 uid=0 auid=1055 ses=258806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690121.653:4260271): pid=27370 uid=0 auid=1055 ses=258806 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674690124.512:4260272): pid=27392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690124.512:4260273): pid=27392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690124.512:4260274): pid=27392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27392 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690124.802:4260275): pid=27391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27392 suid=74 rport=59832 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690124.803:4260276): pid=27391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27392 suid=74 rport=59832 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=? res=success'
type=USER_AUTH msg=audit(1674690126.063:4260277): pid=27391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=190.144.14.170 addr=190.144.14.170 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690127.538:4260278): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690127.538:4260278): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f796b8c1010 items=0 ppid=27405 pid=27410 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690127.538:4260278): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690127.542:4260279): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674690127.542:4260279): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbd0458c010 items=0 ppid=27405 pid=27411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690127.542:4260279): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690127.546:4260280): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690127.546:4260280): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fafa55c7010 items=0 ppid=27405 pid=27412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690127.546:4260280): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690127.551:4260281): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674690127.551:4260281): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4169e03010 items=0 ppid=27405 pid=27413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690127.551:4260281): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690127.858:4260282): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690127.858:4260282): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8ab6568010 items=0 ppid=27405 pid=27422 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690127.858:4260282): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D730039342E3135382E3231382E313034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690127.864:4260283): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690127.864:4260283): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc2f7447010 items=0 ppid=27405 pid=27423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690127.864:4260283): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D640039342E3135382E3231382E313034002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690127.878:4260284): table=filter family=2 entries=1042
type=SYSCALL msg=audit(1674690127.878:4260284): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8246d0b010 items=0 ppid=27405 pid=27424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690127.878:4260284): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003139302E3134342E31342E313730002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690127.883:4260285): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690127.883:4260285): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f2afc667010 items=0 ppid=27405 pid=27425 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690127.883:4260285): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003139302E3134342E31342E313730002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674690128.169:4260286): pid=27391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=190.144.14.170 terminal=ssh res=failed'
type=AVC msg=audit(1674690132.337:4260287): avc: denied { name_connect } for pid=26720 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674690132.337:4260287): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffb792c220 a2=10 a3=7fffb792c21c items=0 ppid=5547 pid=26720 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690132.337:4260287): proctitle="dovecot/auth"
type=AVC msg=audit(1674690132.368:4260288): avc: denied { write } for pid=27446 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674690132.368:4260288): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffed3fb8220 a2=6e a3=63d1be54 items=0 ppid=5547 pid=27446 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690132.368:4260288): proctitle=646F7665636F742F61757468002D77
type=CRYPTO_KEY_USER msg=audit(1674690136.988:4260289): pid=27461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690136.988:4260290): pid=27461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690136.988:4260291): pid=27461 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27461 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690137.025:4260292): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27461 suid=74 rport=48140 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690137.025:4260293): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27461 suid=74 rport=48140 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=USER_AUTH msg=audit(1674690137.270:4260294): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=167.71.202.121 addr=167.71.202.121 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690139.221:4260295): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690139.260:4260296): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27461 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690139.260:4260297): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27461 suid=74 rport=48140 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690139.262:4260298): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690139.262:4260299): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690139.262:4260300): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27460 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690139.262:4260301): pid=27460 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690150.006:4260302): pid=27516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690150.007:4260303): pid=27516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690150.007:4260304): pid=27516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27516 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690150.043:4260305): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27516 suid=74 rport=39958 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690150.043:4260306): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27516 suid=74 rport=39958 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=USER_AUTH msg=audit(1674690150.296:4260307): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.134.170.7 addr=43.134.170.7 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690152.031:4260308): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690152.072:4260309): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27516 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690152.072:4260310): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27516 suid=74 rport=39958 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690152.074:4260311): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690152.074:4260312): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690152.074:4260313): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27515 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690152.074:4260314): pid=27515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690159.630:4260315): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690159.630:4260315): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2adbfa3ac010 items=0 ppid=27550 pid=27555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690159.630:4260315): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650036312E3135342E3132322E313232002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323654
type=CRYPTO_KEY_USER msg=audit(1674690160.286:4260316): pid=27560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690160.286:4260317): pid=27560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690160.286:4260318): pid=27560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27560 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690160.550:4260319): pid=27559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27560 suid=74 rport=49146 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690160.550:4260320): pid=27559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27560 suid=74 rport=49146 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=? res=success'
type=USER_AUTH msg=audit(1674690161.710:4260321): pid=27559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=172.87.22.100 addr=172.87.22.100 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690162.533:4260322): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690162.533:4260322): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7febacaaf010 items=0 ppid=27571 pid=27574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690162.533:4260322): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690162.537:4260323): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690162.537:4260323): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f901164b010 items=0 ppid=27571 pid=27575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690162.537:4260323): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690162.541:4260324): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674690162.541:4260324): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4c652a1010 items=0 ppid=27571 pid=27576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690162.541:4260324): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690162.545:4260325): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690162.545:4260325): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8f67ced010 items=0 ppid=27571 pid=27577 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690162.545:4260325): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690162.856:4260326): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690162.856:4260326): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f329e9bc010 items=0 ppid=27571 pid=27586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690162.856:4260326): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003135372E3234352E36392E313236002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690162.863:4260327): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690162.863:4260327): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4b3fb27010 items=0 ppid=27571 pid=27587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690162.863:4260327): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003135372E3234352E36392E313236002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690162.870:4260328): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690162.870:4260328): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7ff0afdc1010 items=0 ppid=27571 pid=27588 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690162.870:4260328): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003137322E38372E32322E313030002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690162.876:4260329): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690162.876:4260329): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f75376a1010 items=0 ppid=27571 pid=27589 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690162.876:4260329): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003137322E38372E32322E313030002D6A004C4F4744524F504F5554
type=USER_AUTH msg=audit(1674690163.621:4260330): pid=27559 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.87.22.100 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690167.251:4260331): pid=27607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690167.252:4260332): pid=27607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690167.252:4260333): pid=27607 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27607 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690167.334:4260334): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27607 suid=74 rport=35622 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690167.334:4260335): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27607 suid=74 rport=35622 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=USER_AUTH msg=audit(1674690167.767:4260336): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.115.24.11 addr=103.115.24.11 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690169.833:4260337): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690169.919:4260338): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27607 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690169.919:4260339): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27607 suid=74 rport=35622 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690169.920:4260340): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690169.920:4260341): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690169.920:4260342): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27606 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690169.920:4260343): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674690181.671:4260344): pid=27646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690181.671:4260345): pid=27647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690181.671:4260346): pid=27646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690181.671:4260347): pid=27647 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690181.672:4260348): pid=27646 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258807 res=1
type=LOGIN msg=audit(1674690181.672:4260349): pid=27647 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258808 res=1
type=USER_START msg=audit(1674690181.705:4260350): pid=27647 uid=0 auid=1055 ses=258808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690181.705:4260351): pid=27646 uid=0 auid=0 ses=258807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690181.706:4260352): pid=27647 uid=0 auid=1055 ses=258808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690181.707:4260353): pid=27646 uid=0 auid=0 ses=258807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690181.766:4260354): pid=27646 uid=0 auid=0 ses=258807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690181.768:4260355): pid=27646 uid=0 auid=0 ses=258807 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690181.973:4260356): pid=27647 uid=0 auid=1055 ses=258808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690181.975:4260357): pid=27647 uid=0 auid=1055 ses=258808 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674690183.900:4260358): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690183.900:4260359): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690183.900:4260360): pid=27671 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27671 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690183.957:4260361): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27671 suid=74 rport=39876 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690183.957:4260362): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27671 suid=74 rport=39876 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=USER_AUTH msg=audit(1674690184.291:4260363): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=165.154.229.36 addr=165.154.229.36 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690186.694:4260364): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690186.754:4260365): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27671 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690186.754:4260366): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27671 suid=74 rport=39876 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690186.756:4260367): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690186.756:4260368): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690186.756:4260369): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27670 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690186.756:4260370): pid=27670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.154.229.36 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690188.736:4260371): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690188.736:4260371): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd23a686010 items=0 ppid=27689 pid=27694 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690188.736:4260371): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690188.740:4260372): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690188.740:4260372): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f899fe2f010 items=0 ppid=27689 pid=27695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690188.740:4260372): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690188.744:4260373): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674690188.744:4260373): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f48cffc6010 items=0 ppid=27689 pid=27696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690188.744:4260373): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690188.748:4260374): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690188.748:4260374): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe77afa4010 items=0 ppid=27689 pid=27697 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690188.748:4260374): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690189.039:4260375): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690189.039:4260375): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fec2dc13010 items=0 ppid=27689 pid=27706 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690189.039:4260375): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003137302E3130362E3138302E323137002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690189.044:4260376): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690189.044:4260376): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f56c531a010 items=0 ppid=27689 pid=27707 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690189.044:4260376): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003137302E3130362E3138302E323137002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690189.049:4260377): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690189.049:4260377): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f266d6e1010 items=0 ppid=27689 pid=27708 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690189.049:4260377): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003136352E3135342E3232392E3336002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690189.054:4260378): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690189.054:4260378): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f52c303d010 items=0 ppid=27689 pid=27709 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690189.054:4260378): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003136352E3135342E3232392E3336002D6A004C4F4744524F504F5554
type=CRYPTO_KEY_USER msg=audit(1674690222.356:4260379): pid=27838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690222.356:4260380): pid=27838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690222.356:4260381): pid=27838 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27838 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690222.394:4260382): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27838 suid=74 rport=37510 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690222.394:4260383): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27838 suid=74 rport=37510 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=USER_AUTH msg=audit(1674690222.649:4260384): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=167.71.202.121 addr=167.71.202.121 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690224.599:4260385): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690224.640:4260386): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27838 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690224.640:4260387): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27838 suid=74 rport=37510 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690224.641:4260388): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690224.641:4260389): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690224.641:4260390): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27832 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690224.641:4260391): pid=27832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=167.71.202.121 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690227.591:4260392): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690227.591:4260392): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd4665cc010 items=0 ppid=27860 pid=27863 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690227.591:4260392): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690227.596:4260393): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690227.596:4260393): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f03eaac4010 items=0 ppid=27860 pid=27864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690227.596:4260393): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690227.600:4260394): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674690227.600:4260394): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f10678a9010 items=0 ppid=27860 pid=27865 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690227.600:4260394): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690227.605:4260395): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690227.605:4260395): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0165e6e010 items=0 ppid=27860 pid=27866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690227.605:4260395): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690227.899:4260396): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690227.899:4260396): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5062408010 items=0 ppid=27860 pid=27875 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690227.899:4260396): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003134312E39382E31312E3437002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690227.905:4260397): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690227.905:4260397): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd9f5e70010 items=0 ppid=27860 pid=27876 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690227.905:4260397): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003134312E39382E31312E3437002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690227.911:4260398): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690227.911:4260398): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe76a86c010 items=0 ppid=27860 pid=27877 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690227.911:4260398): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003136372E37312E3230322E313231002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690227.917:4260399): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690227.917:4260399): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f49191b0010 items=0 ppid=27860 pid=27878 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690227.917:4260399): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003136372E37312E3230322E313231002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674690241.989:4260400): pid=27921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690241.989:4260401): pid=27921 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690241.990:4260402): pid=27921 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258809 res=1
type=USER_START msg=audit(1674690242.004:4260403): pid=27921 uid=0 auid=1055 ses=258809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690242.006:4260404): pid=27921 uid=0 auid=1055 ses=258809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690242.307:4260405): pid=27921 uid=0 auid=1055 ses=258809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690242.309:4260406): pid=27921 uid=0 auid=1055 ses=258809 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674690247.821:4260407): pid=27951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690247.821:4260408): pid=27951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690247.821:4260409): pid=27951 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27951 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690247.863:4260410): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27951 suid=74 rport=38650 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690247.863:4260411): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=27951 suid=74 rport=38650 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=USER_AUTH msg=audit(1674690248.111:4260412): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=43.134.170.7 addr=43.134.170.7 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690249.966:4260413): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690250.011:4260414): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27951 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690250.011:4260415): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=27951 suid=74 rport=38650 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690250.012:4260416): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=27950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690250.012:4260417): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=27950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690250.013:4260418): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=27950 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690250.013:4260419): pid=27950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=43.134.170.7 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690252.610:4260420): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690252.610:4260420): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fce98333010 items=0 ppid=27971 pid=27974 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690252.610:4260420): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690252.615:4260421): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690252.615:4260421): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4802889010 items=0 ppid=27971 pid=27975 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690252.615:4260421): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690252.620:4260422): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674690252.620:4260422): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5482861010 items=0 ppid=27971 pid=27976 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690252.620:4260422): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690252.624:4260423): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690252.624:4260423): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7feab4872010 items=0 ppid=27971 pid=27977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690252.624:4260423): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690252.917:4260424): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690252.917:4260424): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f5ed443f010 items=0 ppid=27971 pid=27985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690252.917:4260424): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003136372E37312E35362E313130002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690252.923:4260425): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690252.923:4260425): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f81a61e0010 items=0 ppid=27971 pid=27986 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690252.923:4260425): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003136372E37312E35362E313130002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690252.929:4260426): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690252.929:4260426): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbabbd89010 items=0 ppid=27971 pid=27987 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690252.929:4260426): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D730034332E3133342E3137302E37002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690252.934:4260427): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690252.934:4260427): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe201a61010 items=0 ppid=27971 pid=27988 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690252.934:4260427): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D640034332E3133342E3137302E37002D6A004C4F4744524F504F5554
type=AVC msg=audit(1674690281.712:4260428): avc: denied { read } for pid=28088 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674690281.712:4260428): avc: denied { open } for pid=28088 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690281.712:4260428): arch=c000003e syscall=2 success=yes exit=18 a0=5620df36df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=28088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690281.712:4260428): proctitle="dovecot/auth"
type=AVC msg=audit(1674690281.712:4260429): avc: denied { getattr } for pid=28088 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690281.712:4260429): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffc95e2d100 a2=7ffc95e2d100 a3=fffffc00 items=0 ppid=5547 pid=28088 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690281.712:4260429): proctitle="dovecot/auth"
type=AVC msg=audit(1674690283.121:4260430): avc: denied { name_connect } for pid=28088 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674690283.121:4260430): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffc95e2cef0 a2=10 a3=7ffc95e2ceec items=0 ppid=5547 pid=28088 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690283.121:4260430): proctitle="dovecot/auth"
type=AVC msg=audit(1674690283.149:4260431): avc: denied { write } for pid=28095 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674690283.149:4260431): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffef3089740 a2=6e a3=63d1beeb items=0 ppid=5547 pid=28095 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690283.149:4260431): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674690301.366:4260432): pid=28154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690301.366:4260433): pid=28154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690301.366:4260434): pid=28154 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258810 res=1
type=USER_ACCT msg=audit(1674690301.384:4260435): pid=28155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690301.384:4260436): pid=28155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690301.384:4260437): pid=28155 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258811 res=1
type=USER_START msg=audit(1674690301.439:4260438): pid=28154 uid=0 auid=0 ses=258810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690301.440:4260439): pid=28155 uid=0 auid=1055 ses=258811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690301.447:4260440): pid=28155 uid=0 auid=1055 ses=258811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690301.447:4260441): pid=28154 uid=0 auid=0 ses=258810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690301.803:4260442): pid=28155 uid=0 auid=1055 ses=258811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690301.809:4260443): pid=28155 uid=0 auid=1055 ses=258811 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690304.797:4260444): pid=28154 uid=0 auid=0 ses=258810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690304.800:4260445): pid=28154 uid=0 auid=0 ses=258810 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674690310.971:4260446): pid=28204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690310.971:4260447): pid=28204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690310.971:4260448): pid=28204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28204 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690311.045:4260449): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28204 suid=74 rport=36326 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674690311.046:4260450): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=28204 suid=74 rport=36326 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=USER_AUTH msg=audit(1674690311.444:4260451): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=103.115.24.11 addr=103.115.24.11 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674690313.280:4260452): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674690313.358:4260453): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28204 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690313.358:4260454): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=28204 suid=74 rport=36326 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690313.359:4260455): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=28203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690313.359:4260456): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=28203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674690313.359:4260457): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=28203 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674690313.359:4260458): pid=28203 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=103.115.24.11 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674690315.778:4260459): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690315.778:4260459): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fbed83b0010 items=0 ppid=28224 pid=28227 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690315.778:4260459): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674690315.783:4260460): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690315.783:4260460): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fec1c978010 items=0 ppid=28224 pid=28228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690315.783:4260460): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674690315.787:4260461): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674690315.787:4260461): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb757527010 items=0 ppid=28224 pid=28229 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690315.787:4260461): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674690315.790:4260462): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674690315.790:4260462): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fb3b767c010 items=0 ppid=28224 pid=28230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690315.790:4260462): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=NETFILTER_CFG msg=audit(1674690316.098:4260463): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690316.098:4260463): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f934d376010 items=0 ppid=28224 pid=28239 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690316.098:4260463): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E59494E0000002D69006C6F002D73003134332E3131302E3138322E3232002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690316.105:4260464): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690316.105:4260464): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f4811a11010 items=0 ppid=28224 pid=28240 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690316.105:4260464): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D440044454E594F55540000002D6F006C6F002D64003134332E3131302E3138322E3232002D6A004C4F4744524F504F5554
type=NETFILTER_CFG msg=audit(1674690316.111:4260465): table=filter family=2 entries=1043
type=SYSCALL msg=audit(1674690316.111:4260465): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fde81505010 items=0 ppid=28224 pid=28241 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690316.111:4260465): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E59494E0000002D69006C6F002D73003130332E3131352E32342E3131002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674690316.117:4260466): table=filter family=2 entries=1044
type=SYSCALL msg=audit(1674690316.117:4260466): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fce7bdeb010 items=0 ppid=28224 pid=28242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690316.117:4260466): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D76002D410044454E594F55540000002D6F006C6F002D64003130332E3131352E32342E3131002D6A004C4F4744524F504F5554
type=USER_ACCT msg=audit(1674690361.819:4260467): pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690361.819:4260468): pid=28379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690361.820:4260469): pid=28379 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258812 res=1
type=USER_START msg=audit(1674690361.840:4260470): pid=28379 uid=0 auid=1055 ses=258812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690361.843:4260471): pid=28379 uid=0 auid=1055 ses=258812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690362.156:4260472): pid=28379 uid=0 auid=1055 ses=258812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690362.160:4260473): pid=28379 uid=0 auid=1055 ses=258812 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674690362.994:4260474): avc: denied { read } for pid=28426 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674690362.994:4260474): avc: denied { open } for pid=28426 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690362.994:4260474): arch=c000003e syscall=2 success=yes exit=18 a0=5571ecc5ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=28426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690362.994:4260474): proctitle="dovecot/auth"
type=AVC msg=audit(1674690362.994:4260475): avc: denied { getattr } for pid=28426 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690362.994:4260475): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe072f0510 a2=7ffe072f0510 a3=fffffc00 items=0 ppid=5547 pid=28426 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690362.994:4260475): proctitle="dovecot/auth"
type=AVC msg=audit(1674690363.564:4260476): avc: denied { name_connect } for pid=28426 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674690363.564:4260476): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe072f0300 a2=10 a3=7ffe072f02fc items=0 ppid=5547 pid=28426 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690363.564:4260476): proctitle="dovecot/auth"
type=AVC msg=audit(1674690363.606:4260477): avc: denied { write } for pid=28454 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674690363.606:4260477): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc19374d40 a2=6e a3=63d1bf3b items=0 ppid=5547 pid=28454 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690363.606:4260477): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674690421.179:4260478): pid=28690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690421.179:4260479): pid=28690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690421.180:4260480): pid=28690 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258813 res=1
type=USER_START msg=audit(1674690421.196:4260481): pid=28690 uid=0 auid=1055 ses=258813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690421.198:4260482): pid=28690 uid=0 auid=1055 ses=258813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690421.437:4260483): pid=28690 uid=0 auid=1055 ses=258813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690421.439:4260484): pid=28690 uid=0 auid=1055 ses=258813 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690481.459:4260485): pid=28874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690481.459:4260486): pid=28874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690481.460:4260487): pid=28874 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258814 res=1
type=USER_START msg=audit(1674690481.478:4260488): pid=28874 uid=0 auid=1055 ses=258814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690481.480:4260489): pid=28874 uid=0 auid=1055 ses=258814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690481.764:4260490): pid=28874 uid=0 auid=1055 ses=258814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690481.767:4260491): pid=28874 uid=0 auid=1055 ses=258814 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674690488.604:4260492): avc: denied { read append } for pid=28911 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674690488.604:4260492): avc: denied { open } for pid=28911 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690488.604:4260492): arch=c000003e syscall=2 success=yes exit=8 a0=5577d399ba60 a1=402 a2=7fff84f9a060 a3=7fff84f99ae0 items=0 ppid=5547 pid=28911 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690488.604:4260492): proctitle="dovecot/imap"
type=AVC msg=audit(1674690488.604:4260493): avc: denied { getattr } for pid=28911 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690488.604:4260493): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff84f99fc0 a2=7fff84f99fc0 a3=7fff84f99a20 items=0 ppid=5547 pid=28911 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690488.604:4260493): proctitle="dovecot/imap"
type=AVC msg=audit(1674690488.604:4260494): avc: denied { write } for pid=28911 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690488.604:4260494): arch=c000003e syscall=2 success=yes exit=10 a0=5577d39a0990 a1=2 a2=7fff84f99d60 a3=7fff84f99820 items=0 ppid=5547 pid=28911 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690488.604:4260494): proctitle="dovecot/imap"
type=AVC msg=audit(1674690488.605:4260495): avc: denied { lock } for pid=28911 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690488.605:4260495): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7fff84f99c60 a3=63d1bfb8 items=0 ppid=5547 pid=28911 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690488.605:4260495): proctitle="dovecot/imap"
type=AVC msg=audit(1674690488.605:4260496): avc: denied { read } for pid=28911 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674690488.605:4260496): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=5577d39c9300 a2=90800 a3=0 items=0 ppid=5547 pid=28911 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690488.605:4260496): proctitle="dovecot/imap"
type=AVC msg=audit(1674690488.605:4260497): avc: denied { getattr } for pid=28911 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690488.605:4260497): arch=c000003e syscall=4 success=yes exit=0 a0=5577d398ba60 a1=7fff84f9a010 a2=7fff84f9a010 a3=6f632e6f72676173 items=0 ppid=5547 pid=28911 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690488.605:4260497): proctitle="dovecot/imap"
type=AVC msg=audit(1674690491.616:4260498): avc: denied { write } for pid=28921 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674690491.616:4260498): arch=c000003e syscall=21 success=yes exit=0 a0=55dc2c16d4c0 a1=2 a2=7b48 a3=7ffd857dc0e0 items=0 ppid=5547 pid=28921 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690491.616:4260498): proctitle="dovecot/imap"
type=USER_ACCT msg=audit(1674690541.783:4260499): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690541.784:4260500): pid=29076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690541.784:4260501): pid=29076 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258815 res=1
type=USER_START msg=audit(1674690541.797:4260502): pid=29076 uid=0 auid=1055 ses=258815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690541.797:4260503): pid=29076 uid=0 auid=1055 ses=258815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690542.137:4260504): pid=29076 uid=0 auid=1055 ses=258815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690542.138:4260505): pid=29076 uid=0 auid=1055 ses=258815 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690601.151:4260506): pid=29259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690601.152:4260507): pid=29258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690601.152:4260508): pid=29259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690601.152:4260509): pid=29258 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690601.152:4260510): pid=29259 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258816 res=1
type=LOGIN msg=audit(1674690601.152:4260511): pid=29258 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258817 res=1
type=USER_ACCT msg=audit(1674690601.152:4260512): pid=29261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690601.152:4260513): pid=29261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690601.153:4260514): pid=29261 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258818 res=1
type=USER_ACCT msg=audit(1674690601.154:4260515): pid=29260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690601.154:4260516): pid=29260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690601.154:4260517): pid=29260 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258819 res=1
type=USER_START msg=audit(1674690601.203:4260518): pid=29261 uid=0 auid=1055 ses=258818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690601.203:4260519): pid=29259 uid=0 auid=0 ses=258816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690601.205:4260520): pid=29260 uid=0 auid=0 ses=258819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690601.205:4260521): pid=29258 uid=0 auid=0 ses=258817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690601.205:4260522): pid=29261 uid=0 auid=1055 ses=258818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690601.206:4260523): pid=29258 uid=0 auid=0 ses=258817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690601.206:4260524): pid=29259 uid=0 auid=0 ses=258816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690601.207:4260525): pid=29260 uid=0 auid=0 ses=258819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690601.246:4260526): pid=29258 uid=0 auid=0 ses=258817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690601.249:4260527): pid=29258 uid=0 auid=0 ses=258817 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690601.287:4260528): pid=29260 uid=0 auid=0 ses=258819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690601.290:4260529): pid=29260 uid=0 auid=0 ses=258819 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690601.509:4260530): pid=29261 uid=0 auid=1055 ses=258818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690601.511:4260531): pid=29261 uid=0 auid=1055 ses=258818 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690604.545:4260532): pid=29259 uid=0 auid=0 ses=258816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690604.546:4260533): pid=29259 uid=0 auid=0 ses=258816 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674690656.082:4260534): avc: denied { read } for pid=29447 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674690656.082:4260534): avc: denied { open } for pid=29447 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690656.082:4260534): arch=c000003e syscall=2 success=yes exit=18 a0=55f2f5d07f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=29447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690656.082:4260534): proctitle="dovecot/auth"
type=AVC msg=audit(1674690656.082:4260535): avc: denied { getattr } for pid=29447 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690656.082:4260535): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffdcc105d20 a2=7ffdcc105d20 a3=fffffc00 items=0 ppid=5547 pid=29447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690656.082:4260535): proctitle="dovecot/auth"
type=AVC msg=audit(1674690658.663:4260536): avc: denied { name_connect } for pid=29447 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674690658.663:4260536): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdcc105b10 a2=10 a3=7ffdcc105b0c items=0 ppid=5547 pid=29447 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690658.663:4260536): proctitle="dovecot/auth"
type=AVC msg=audit(1674690658.691:4260537): avc: denied { write } for pid=29455 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674690658.691:4260537): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffee323c550 a2=6e a3=63d1c062 items=0 ppid=5547 pid=29455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690658.691:4260537): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674690661.566:4260538): pid=29469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690661.566:4260539): pid=29469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690661.567:4260540): pid=29469 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258820 res=1
type=USER_START msg=audit(1674690661.584:4260541): pid=29469 uid=0 auid=1055 ses=258820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690661.586:4260542): pid=29469 uid=0 auid=1055 ses=258820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690661.876:4260543): pid=29469 uid=0 auid=1055 ses=258820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690661.878:4260544): pid=29469 uid=0 auid=1055 ses=258820 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674690670.002:4260545): avc: denied { name_connect } for pid=29447 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674690670.002:4260545): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdcc105b10 a2=10 a3=7ffdcc105b0c items=0 ppid=5547 pid=29447 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690670.002:4260545): proctitle="dovecot/auth"
type=AVC msg=audit(1674690670.014:4260546): avc: denied { write } for pid=29455 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674690670.014:4260546): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffee323c550 a2=6e a3=63d1c06e items=0 ppid=5547 pid=29455 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690670.014:4260546): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674690721.900:4260547): pid=29762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690721.901:4260548): pid=29762 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690721.902:4260549): pid=29762 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258821 res=1
type=USER_START msg=audit(1674690721.922:4260550): pid=29762 uid=0 auid=1055 ses=258821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690721.925:4260551): pid=29762 uid=0 auid=1055 ses=258821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690722.176:4260552): pid=29762 uid=0 auid=1055 ses=258821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690722.178:4260553): pid=29762 uid=0 auid=1055 ses=258821 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690781.192:4260554): pid=29968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690781.192:4260555): pid=29967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690781.192:4260556): pid=29968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690781.192:4260557): pid=29967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690781.192:4260558): pid=29968 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258822 res=1
type=LOGIN msg=audit(1674690781.192:4260559): pid=29967 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258823 res=1
type=USER_START msg=audit(1674690781.226:4260560): pid=29967 uid=0 auid=0 ses=258823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690781.226:4260561): pid=29968 uid=0 auid=1055 ses=258822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690781.227:4260562): pid=29968 uid=0 auid=1055 ses=258822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690781.228:4260563): pid=29967 uid=0 auid=0 ses=258823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690781.341:4260564): pid=29967 uid=0 auid=0 ses=258823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690781.344:4260565): pid=29967 uid=0 auid=0 ses=258823 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690781.505:4260566): pid=29968 uid=0 auid=1055 ses=258822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690781.508:4260567): pid=29968 uid=0 auid=1055 ses=258822 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674690783.753:4260568): avc: denied { name_connect } for pid=29447 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674690783.753:4260568): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffdcc105b10 a2=10 a3=7ffdcc105b0c items=0 ppid=5547 pid=29447 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690783.753:4260568): proctitle="dovecot/auth"
type=AVC msg=audit(1674690783.766:4260569): avc: denied { write } for pid=29882 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674690783.766:4260569): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff1b94a500 a2=6e a3=63d1c0df items=0 ppid=5547 pid=29882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690783.766:4260569): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674690841.521:4260570): pid=30170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690841.521:4260571): pid=30170 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690841.521:4260572): pid=30170 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258824 res=1
type=USER_START msg=audit(1674690841.532:4260573): pid=30170 uid=0 auid=1055 ses=258824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690841.534:4260574): pid=30170 uid=0 auid=1055 ses=258824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690841.757:4260575): pid=30170 uid=0 auid=1055 ses=258824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690841.759:4260576): pid=30170 uid=0 auid=1055 ses=258824 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674690859.990:4260577): avc: denied { read } for pid=30230 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674690859.990:4260577): avc: denied { open } for pid=30230 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690859.990:4260577): arch=c000003e syscall=2 success=yes exit=18 a0=55ff84df8f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690859.990:4260577): proctitle="dovecot/auth"
type=AVC msg=audit(1674690859.990:4260578): avc: denied { getattr } for pid=30230 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690859.990:4260578): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffeb6076640 a2=7ffeb6076640 a3=fffffc00 items=0 ppid=5547 pid=30230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690859.990:4260578): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674690873.859:4260579): table=filter family=2 entries=1045
type=SYSCALL msg=audit(1674690873.859:4260579): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2acb40927010 items=0 ppid=30290 pid=30298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690873.859:4260579): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E392E35332E323330002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3236543233
type=USER_ACCT msg=audit(1674690901.779:4260580): pid=30383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690901.779:4260581): pid=30382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690901.779:4260582): pid=30382 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690901.779:4260583): pid=30383 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690901.782:4260585): pid=30382 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258825 res=1
type=LOGIN msg=audit(1674690901.782:4260584): pid=30383 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258826 res=1
type=USER_START msg=audit(1674690901.818:4260586): pid=30383 uid=0 auid=1055 ses=258826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690901.819:4260587): pid=30383 uid=0 auid=1055 ses=258826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674690901.819:4260588): pid=30382 uid=0 auid=0 ses=258825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690901.823:4260589): pid=30382 uid=0 auid=0 ses=258825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690902.184:4260590): pid=30383 uid=0 auid=1055 ses=258826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690902.188:4260591): pid=30383 uid=0 auid=1055 ses=258826 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690905.186:4260592): pid=30382 uid=0 auid=0 ses=258825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690905.187:4260593): pid=30382 uid=0 auid=0 ses=258825 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674690961.205:4260594): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674690961.206:4260595): pid=30585 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674690961.206:4260596): pid=30585 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258827 res=1
type=USER_START msg=audit(1674690961.218:4260597): pid=30585 uid=0 auid=1055 ses=258827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674690961.220:4260598): pid=30585 uid=0 auid=1055 ses=258827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674690961.453:4260599): pid=30585 uid=0 auid=1055 ses=258827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674690961.457:4260600): pid=30585 uid=0 auid=1055 ses=258827 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674690987.345:4260601): avc: denied { read } for pid=30725 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674690987.345:4260601): avc: denied { open } for pid=30725 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690987.345:4260601): arch=c000003e syscall=2 success=yes exit=18 a0=564f2c341f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=30725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690987.345:4260601): proctitle="dovecot/auth"
type=AVC msg=audit(1674690987.345:4260602): avc: denied { getattr } for pid=30725 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674690987.345:4260602): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffe922b63c0 a2=7ffe922b63c0 a3=fffffc00 items=0 ppid=5547 pid=30725 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690987.345:4260602): proctitle="dovecot/auth"
type=AVC msg=audit(1674690987.866:4260603): avc: denied { name_connect } for pid=30725 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674690987.866:4260603): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7ffe922b61b0 a2=10 a3=7ffe922b61ac items=0 ppid=5547 pid=30725 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690987.866:4260603): proctitle="dovecot/auth"
type=AVC msg=audit(1674690987.895:4260604): avc: denied { write } for pid=30755 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674690987.895:4260604): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcec92c070 a2=6e a3=63d1c1ab items=0 ppid=5547 pid=30755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674690987.895:4260604): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674691021.473:4260605): pid=30898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691021.474:4260606): pid=30898 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691021.475:4260607): pid=30898 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258828 res=1
type=USER_START msg=audit(1674691021.490:4260608): pid=30898 uid=0 auid=1055 ses=258828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691021.491:4260609): pid=30898 uid=0 auid=1055 ses=258828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691021.714:4260610): pid=30898 uid=0 auid=1055 ses=258828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691021.716:4260611): pid=30898 uid=0 auid=1055 ses=258828 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674691040.407:4260612): avc: denied { write } for pid=30755 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674691040.407:4260612): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffcec92c070 a2=6e a3=63d1c1e0 items=0 ppid=5547 pid=30755 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691040.407:4260612): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674691081.730:4260613): pid=31099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691081.730:4260614): pid=31098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691081.730:4260615): pid=31098 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691081.730:4260616): pid=31099 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691081.730:4260618): pid=31098 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258829 res=1
type=LOGIN msg=audit(1674691081.730:4260617): pid=31099 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258830 res=1
type=USER_START msg=audit(1674691081.755:4260619): pid=31098 uid=0 auid=0 ses=258829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691081.755:4260620): pid=31099 uid=0 auid=1055 ses=258830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691081.757:4260621): pid=31099 uid=0 auid=1055 ses=258830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691081.757:4260622): pid=31098 uid=0 auid=0 ses=258829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691081.799:4260623): pid=31098 uid=0 auid=0 ses=258829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691081.802:4260624): pid=31098 uid=0 auid=0 ses=258829 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691082.028:4260625): pid=31099 uid=0 auid=1055 ses=258830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691082.029:4260626): pid=31099 uid=0 auid=1055 ses=258830 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691141.042:4260627): pid=31282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691141.042:4260628): pid=31282 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691141.042:4260629): pid=31282 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258831 res=1
type=USER_START msg=audit(1674691141.054:4260630): pid=31282 uid=0 auid=1055 ses=258831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691141.056:4260631): pid=31282 uid=0 auid=1055 ses=258831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691141.426:4260632): pid=31282 uid=0 auid=1055 ses=258831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691141.428:4260633): pid=31282 uid=0 auid=1055 ses=258831 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691201.441:4260634): pid=31483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691201.441:4260635): pid=31483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691201.441:4260636): pid=31483 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258832 res=1
type=USER_ACCT msg=audit(1674691201.452:4260637): pid=31482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691201.452:4260638): pid=31482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691201.452:4260639): pid=31482 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258833 res=1
type=USER_ACCT msg=audit(1674691201.455:4260640): pid=31486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691201.455:4260641): pid=31486 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691201.455:4260642): pid=31486 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258834 res=1
type=USER_ACCT msg=audit(1674691201.468:4260643): pid=31485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691201.468:4260644): pid=31485 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691201.468:4260645): pid=31485 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258835 res=1
type=USER_ACCT msg=audit(1674691201.470:4260646): pid=31484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691201.471:4260647): pid=31484 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691201.471:4260648): pid=31484 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258836 res=1
type=USER_START msg=audit(1674691201.621:4260649): pid=31483 uid=0 auid=0 ses=258832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691201.631:4260650): pid=31482 uid=0 auid=0 ses=258833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691201.633:4260651): pid=31486 uid=0 auid=1055 ses=258834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691201.634:4260652): pid=31485 uid=0 auid=0 ses=258835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691201.634:4260653): pid=31483 uid=0 auid=0 ses=258832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691201.634:4260654): pid=31485 uid=0 auid=0 ses=258835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691201.642:4260655): pid=31484 uid=0 auid=0 ses=258836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691201.642:4260656): pid=31482 uid=0 auid=0 ses=258833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691201.643:4260657): pid=31486 uid=0 auid=1055 ses=258834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691201.643:4260658): pid=31484 uid=0 auid=0 ses=258836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691201.717:4260659): pid=31482 uid=0 auid=0 ses=258833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691201.719:4260660): pid=31482 uid=0 auid=0 ses=258833 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691201.806:4260661): pid=31484 uid=0 auid=0 ses=258836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691201.825:4260662): pid=31484 uid=0 auid=0 ses=258836 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691202.121:4260663): pid=31486 uid=0 auid=1055 ses=258834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691202.121:4260664): pid=31486 uid=0 auid=1055 ses=258834 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674691202.154:4260665): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674691202.154:4260665): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fd9ca2db010 items=0 ppid=31503 pid=31517 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=258832 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 key=(null)
type=PROCTITLE msg=audit(1674691202.154:4260665): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674691202.170:4260666): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674691202.170:4260666): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f1120af9010 items=0 ppid=31503 pid=31518 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=258832 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 key=(null)
type=PROCTITLE msg=audit(1674691202.170:4260666): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674691202.196:4260667): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674691202.196:4260667): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f8ec6338010 items=0 ppid=31503 pid=31519 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=258832 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 key=(null)
type=PROCTITLE msg=audit(1674691202.196:4260667): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674691202.238:4260668): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674691202.238:4260668): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f0fcf22e010 items=0 ppid=31503 pid=31521 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=258832 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023 key=(null)
type=PROCTITLE msg=audit(1674691202.238:4260668): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=SERVICE_START msg=audit(1674691202.891:4260669): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lfd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'
type=NETFILTER_CFG msg=audit(1674691203.256:4260670): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674691203.256:4260670): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fe2a160a010 items=0 ppid=31532 pid=31535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691203.256:4260670): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D4E005445535444454E59
type=NETFILTER_CFG msg=audit(1674691203.280:4260671): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674691203.280:4260671): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f766a4ae010 items=0 ppid=31532 pid=31536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691203.280:4260671): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D49005445535444454E59002D6A0052454A454354
type=NETFILTER_CFG msg=audit(1674691203.297:4260672): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674691203.297:4260672): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7fc0307bb010 items=0 ppid=31532 pid=31537 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691203.297:4260672): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D46005445535444454E59
type=NETFILTER_CFG msg=audit(1674691203.319:4260673): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674691203.319:4260673): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=7f95e1703010 items=0 ppid=31532 pid=31538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691203.319:4260673): proctitle=2F7362696E2F69707461626C6573002D2D77616974002D58005445535444454E59
type=SERVICE_START msg=audit(1674691203.815:4260674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=lfd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674691203.855:4260675): pid=31483 uid=0 auid=0 ses=258832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691203.859:4260676): pid=31483 uid=0 auid=0 ses=258832 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691205.342:4260677): pid=31485 uid=0 auid=0 ses=258835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691205.346:4260678): pid=31485 uid=0 auid=0 ses=258835 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691261.366:4260680): pid=31728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691261.366:4260679): pid=31729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691261.367:4260681): pid=31729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691261.367:4260682): pid=31728 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691261.368:4260683): pid=31728 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258837 res=1
type=LOGIN msg=audit(1674691261.368:4260684): pid=31729 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258838 res=1
type=USER_START msg=audit(1674691261.399:4260685): pid=31728 uid=0 auid=0 ses=258837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691261.400:4260686): pid=31729 uid=0 auid=1055 ses=258838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691261.401:4260687): pid=31728 uid=0 auid=0 ses=258837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691261.401:4260688): pid=31729 uid=0 auid=1055 ses=258838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691261.434:4260689): pid=31728 uid=0 auid=0 ses=258837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691261.438:4260690): pid=31728 uid=0 auid=0 ses=258837 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691261.711:4260691): pid=31729 uid=0 auid=1055 ses=258838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691261.713:4260692): pid=31729 uid=0 auid=1055 ses=258838 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674691304.842:4260693): avc: denied { read } for pid=31926 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674691304.842:4260693): avc: denied { open } for pid=31926 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691304.842:4260693): arch=c000003e syscall=2 success=yes exit=18 a0=56438464cf70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=31926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691304.842:4260693): proctitle="dovecot/auth"
type=AVC msg=audit(1674691304.842:4260694): avc: denied { getattr } for pid=31926 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691304.842:4260694): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffbfc14220 a2=7fffbfc14220 a3=fffffc00 items=0 ppid=5547 pid=31926 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691304.842:4260694): proctitle="dovecot/auth"
type=AVC msg=audit(1674691305.359:4260695): avc: denied { name_connect } for pid=31926 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674691305.359:4260695): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fffbfc14010 a2=10 a3=7fffbfc1400c items=0 ppid=5547 pid=31926 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691305.359:4260695): proctitle="dovecot/auth"
type=AVC msg=audit(1674691305.390:4260696): avc: denied { write } for pid=31957 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674691305.390:4260696): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe225a3170 a2=6e a3=63d1c2e9 items=0 ppid=5547 pid=31957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691305.390:4260696): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674691321.732:4260697): pid=32053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691321.732:4260698): pid=32053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691321.733:4260699): pid=32053 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258839 res=1
type=USER_START msg=audit(1674691321.751:4260700): pid=32053 uid=0 auid=1055 ses=258839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691321.753:4260701): pid=32053 uid=0 auid=1055 ses=258839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691321.991:4260702): pid=32053 uid=0 auid=1055 ses=258839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691321.992:4260703): pid=32053 uid=0 auid=1055 ses=258839 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674691347.593:4260704): pid=32155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32155 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691347.593:4260705): pid=32155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32155 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691347.593:4260706): pid=32155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32155 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691347.839:4260707): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=32155 suid=74 rport=39286 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691347.840:4260708): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=diffie-hellman-group-exchange-sha256 spid=32155 suid=74 rport=39286 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=USER_AUTH msg=audit(1674691349.750:4260709): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=165.22.190.158 addr=165.22.190.158 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674691351.421:4260710): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674691351.985:4260711): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32155 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691351.985:4260712): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32155 suid=74 rport=39286 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691351.986:4260713): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691351.986:4260714): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691351.986:4260715): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32153 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674691351.987:4260716): pid=32153 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=165.22.190.158 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674691373.640:4260717): table=filter family=2 entries=1046
type=SYSCALL msg=audit(1674691373.640:4260717): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab4813b1010 items=0 ppid=32225 pid=32230 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691373.640:4260717): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003231382E342E3132372E3738002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3237543030
type=USER_ACCT msg=audit(1674691382.011:4260718): pid=32255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691382.011:4260719): pid=32255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691382.011:4260720): pid=32255 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258840 res=1
type=USER_START msg=audit(1674691382.031:4260721): pid=32255 uid=0 auid=1055 ses=258840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691382.033:4260722): pid=32255 uid=0 auid=1055 ses=258840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691382.292:4260723): pid=32255 uid=0 auid=1055 ses=258840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691382.295:4260724): pid=32255 uid=0 auid=1055 ses=258840 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674691384.773:4260725): avc: denied { name_connect } for pid=31926 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674691384.773:4260725): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffbfc14010 a2=10 a3=7fffbfc1400c items=0 ppid=5547 pid=31926 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691384.773:4260725): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674691385.867:4260726): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674691385.867:4260726): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b89f3766010 items=0 ppid=32279 pid=32284 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691385.867:4260726): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132342E3136312E3130322E3734002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323754
type=CRYPTO_KEY_USER msg=audit(1674691393.112:4260727): pid=32305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691393.113:4260728): pid=32305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691393.113:4260729): pid=32305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32305 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691393.342:4260730): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=32305 suid=74 rport=60904 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=119.206.116.6 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691393.342:4260731): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha1 pfs=diffie-hellman-group1-sha1 spid=32305 suid=74 rport=60904 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=119.206.116.6 terminal=? res=success'
type=USER_AUTH msg=audit(1674691394.586:4260732): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=119.206.116.6 addr=119.206.116.6 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674691396.432:4260733): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=119.206.116.6 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674691397.488:4260734): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32305 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691397.488:4260735): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=32305 suid=74 rport=60904 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=119.206.116.6 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691397.489:4260736): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=32303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691397.489:4260737): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=32303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691397.489:4260738): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=32303 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674691397.489:4260739): pid=32303 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=119.206.116.6 terminal=ssh res=failed'
type=AVC msg=audit(1674691434.789:4260740): avc: denied { write } for pid=32447 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674691434.789:4260740): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe073da6d0 a2=6e a3=63d1c36a items=0 ppid=5547 pid=32447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691434.789:4260740): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674691441.313:4260741): pid=32473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691441.313:4260742): pid=32473 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691441.314:4260743): pid=32473 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258841 res=1
type=USER_START msg=audit(1674691441.332:4260744): pid=32473 uid=0 auid=1055 ses=258841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691441.335:4260745): pid=32473 uid=0 auid=1055 ses=258841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691441.677:4260746): pid=32473 uid=0 auid=1055 ses=258841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691441.680:4260747): pid=32473 uid=0 auid=1055 ses=258841 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691501.700:4260748): pid=32662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691501.700:4260749): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691501.700:4260750): pid=32662 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691501.700:4260751): pid=32661 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691501.700:4260752): pid=32662 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258842 res=1
type=LOGIN msg=audit(1674691501.700:4260753): pid=32661 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258843 res=1
type=USER_ACCT msg=audit(1674691501.700:4260754): pid=32663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691501.701:4260755): pid=32663 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691501.701:4260756): pid=32663 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258844 res=1
type=USER_START msg=audit(1674691501.766:4260757): pid=32661 uid=0 auid=0 ses=258843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691501.767:4260758): pid=32663 uid=0 auid=1055 ses=258844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691501.768:4260759): pid=32663 uid=0 auid=1055 ses=258844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691501.768:4260760): pid=32661 uid=0 auid=0 ses=258843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691501.768:4260761): pid=32662 uid=0 auid=0 ses=258842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691501.769:4260762): pid=32662 uid=0 auid=0 ses=258842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691501.904:4260763): pid=32662 uid=0 auid=0 ses=258842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691501.910:4260764): pid=32662 uid=0 auid=0 ses=258842 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691502.263:4260765): pid=32663 uid=0 auid=1055 ses=258844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691502.266:4260766): pid=32663 uid=0 auid=1055 ses=258844 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674691504.990:4260767): avc: denied { name_connect } for pid=31926 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674691504.990:4260767): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffbfc14010 a2=10 a3=7fffbfc1400c items=0 ppid=5547 pid=31926 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691504.990:4260767): proctitle="dovecot/auth"
type=AVC msg=audit(1674691505.023:4260768): avc: denied { write } for pid=32703 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674691505.023:4260768): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff17f9f790 a2=6e a3=63d1c3b1 items=0 ppid=5547 pid=32703 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691505.023:4260768): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674691505.162:4260769): pid=32661 uid=0 auid=0 ses=258843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691505.165:4260770): pid=32661 uid=0 auid=0 ses=258843 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674691505.590:4260771): avc: denied { read append } for pid=32705 comm="imap" name="dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674691505.590:4260771): avc: denied { open } for pid=32705 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691505.590:4260771): arch=c000003e syscall=2 success=yes exit=8 a0=55b5cf310a60 a1=402 a2=7ffc74aa3ff0 a3=7ffc74aa3a60 items=0 ppid=5547 pid=32705 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691505.590:4260771): proctitle="dovecot/imap"
type=AVC msg=audit(1674691505.591:4260772): avc: denied { getattr } for pid=32705 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691505.591:4260772): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffc74aa3f50 a2=7ffc74aa3f50 a3=7ffc74aa39a0 items=0 ppid=5547 pid=32705 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691505.591:4260772): proctitle="dovecot/imap"
type=AVC msg=audit(1674691505.591:4260773): avc: denied { write } for pid=32705 comm="imap" name="dovecot.list.index" dev="vda1" ino=33481522 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691505.591:4260773): arch=c000003e syscall=2 success=yes exit=10 a0=55b5cf315960 a1=2 a2=7ffc74aa3cf0 a3=7ffc74aa37a0 items=0 ppid=5547 pid=32705 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691505.591:4260773): proctitle="dovecot/imap"
type=AVC msg=audit(1674691505.591:4260774): avc: denied { lock } for pid=32705 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691505.591:4260774): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffc74aa3bf0 a3=63d1c3b1 items=0 ppid=5547 pid=32705 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691505.591:4260774): proctitle="dovecot/imap"
type=AVC msg=audit(1674691505.591:4260775): avc: denied { read } for pid=32705 comm="imap" name="sales" dev="vda1" ino=29444648 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674691505.591:4260775): arch=c000003e syscall=257 success=yes exit=13 a0=ffffffffffffff9c a1=55b5cf33e300 a2=90800 a3=0 items=0 ppid=5547 pid=32705 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691505.591:4260775): proctitle="dovecot/imap"
type=AVC msg=audit(1674691505.592:4260776): avc: denied { getattr } for pid=32705 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/.Drafts/dovecot.index.log" dev="vda1" ino=234519849 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691505.592:4260776): arch=c000003e syscall=4 success=yes exit=0 a0=55b5cf300a60 a1=7ffc74aa3fa0 a2=7ffc74aa3fa0 a3=6f632e6f72676173 items=0 ppid=5547 pid=32705 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691505.592:4260776): proctitle="dovecot/imap"
type=AVC msg=audit(1674691507.165:4260777): avc: denied { read } for pid=32714 comm="imap" name="dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674691507.165:4260777): avc: denied { open } for pid=32714 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691507.165:4260777): arch=c000003e syscall=2 success=yes exit=8 a0=5598e9c804b0 a1=0 a2=7b48 a3=2 items=0 ppid=5547 pid=32714 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691507.165:4260777): proctitle="dovecot/imap"
type=AVC msg=audit(1674691507.165:4260778): avc: denied { getattr } for pid=32714 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot-acl-list" dev="vda1" ino=29453560 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691507.165:4260778): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7ffcacee8390 a2=7ffcacee8390 a3=2 items=0 ppid=5547 pid=32714 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691507.165:4260778): proctitle="dovecot/imap"
type=AVC msg=audit(1674691507.165:4260779): avc: denied { append } for pid=32714 comm="imap" name="dovecot.index.log" dev="vda1" ino=29884819 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691507.165:4260779): arch=c000003e syscall=2 success=yes exit=8 a0=5598e9cd40d0 a1=402 a2=7ffcacee82f0 a3=7ffcacee7d60 items=0 ppid=5547 pid=32714 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691507.165:4260779): proctitle="dovecot/imap"
type=AVC msg=audit(1674691507.165:4260780): avc: denied { write } for pid=32714 comm="imap" name="dovecot.index" dev="vda1" ino=33481563 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691507.165:4260780): arch=c000003e syscall=2 success=yes exit=10 a0=5598e9cd3e10 a1=2 a2=7ffcacee7ff0 a3=7ffcacee7aa0 items=0 ppid=5547 pid=32714 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691507.165:4260780): proctitle="dovecot/imap"
type=AVC msg=audit(1674691507.167:4260781): avc: denied { write } for pid=32714 comm="imap" name="cur" dev="vda1" ino=251799139 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
type=SYSCALL msg=audit(1674691507.167:4260781): arch=c000003e syscall=21 success=yes exit=0 a0=5598e9c804c0 a1=2 a2=7b48 a3=7ffcacee7ea0 items=0 ppid=5547 pid=32714 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691507.167:4260781): proctitle="dovecot/imap"
type=AVC msg=audit(1674691509.309:4260782): avc: denied { lock } for pid=32719 comm="imap" path="/home/remysagr/mail/remysagro.com/sales/dovecot.list.index.log" dev="vda1" ino=33481521 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691509.309:4260782): arch=c000003e syscall=72 success=yes exit=0 a0=8 a1=7 a2=7ffe0a3ae980 a3=63d1c3b5 items=0 ppid=5547 pid=32719 auid=4294967295 uid=1015 gid=1017 euid=1015 suid=1015 fsuid=1015 egid=1017 sgid=1017 fsgid=1017 tty=(none) ses=4294967295 comm="imap" exe="/usr/libexec/dovecot/imap" subj=system_u:system_r:dovecot_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691509.309:4260782): proctitle="dovecot/imap"
type=CRYPTO_KEY_USER msg=audit(1674691545.610:4260783): pid=391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691545.610:4260784): pid=391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691545.610:4260785): pid=391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=391 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691545.767:4260786): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=391 suid=74 rport=15174 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.142 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691545.768:4260787): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=391 suid=74 rport=15174 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.142 terminal=? res=success'
type=USER_AUTH msg=audit(1674691546.688:4260788): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=195.226.194.142 addr=195.226.194.142 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674691548.067:4260789): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.226.194.142 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674691548.226:4260790): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=391 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691548.226:4260791): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=391 suid=74 rport=15174 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=195.226.194.142 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691548.227:4260792): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691548.227:4260793): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691548.227:4260794): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=390 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674691548.227:4260795): pid=390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=195.226.194.142 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674691561.182:4260796): pid=430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691561.182:4260797): pid=430 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691561.183:4260798): pid=430 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258845 res=1
type=USER_START msg=audit(1674691561.200:4260799): pid=430 uid=0 auid=1055 ses=258845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691561.202:4260800): pid=430 uid=0 auid=1055 ses=258845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691561.454:4260801): pid=430 uid=0 auid=1055 ses=258845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691561.457:4260802): pid=430 uid=0 auid=1055 ses=258845 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674691602.513:4260803): avc: denied { name_connect } for pid=31926 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674691602.513:4260803): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffbfc14010 a2=10 a3=7fffbfc1400c items=0 ppid=5547 pid=31926 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691602.513:4260803): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674691603.604:4260804): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674691603.604:4260804): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2abb5936a010 items=0 ppid=716 pid=721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691603.604:4260804): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650034392E39312E3234322E323434002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32375430
type=NETFILTER_CFG msg=audit(1674691606.824:4260805): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674691606.824:4260805): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b317a77e010 items=0 ppid=736 pid=741 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691606.824:4260805): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131372E34382E3139352E32002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3237543030
type=AVC msg=audit(1674691612.026:4260806): avc: denied { write } for pid=882 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674691612.026:4260806): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd5a7d4110 a2=6e a3=63d1c41c items=0 ppid=5547 pid=882 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691612.026:4260806): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674691621.480:4260807): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691621.480:4260808): pid=916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691621.482:4260809): pid=916 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258846 res=1
type=USER_START msg=audit(1674691621.506:4260810): pid=916 uid=0 auid=1055 ses=258846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691621.507:4260811): pid=916 uid=0 auid=1055 ses=258846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691621.769:4260812): pid=916 uid=0 auid=1055 ses=258846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691621.771:4260813): pid=916 uid=0 auid=1055 ses=258846 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674691675.076:4260814): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691675.076:4260815): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691675.076:4260816): pid=1123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1123 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691675.299:4260817): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1123 suid=74 rport=35332 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.56.48 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691675.299:4260818): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=1123 suid=74 rport=35332 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.56.48 terminal=? res=success'
type=USER_AUTH msg=audit(1674691675.962:4260819): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="?" exe="/usr/sbin/sshd" hostname=209.141.56.48 addr=209.141.56.48 terminal=ssh res=failed'
type=USER_AUTH msg=audit(1674691678.053:4260820): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=password acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.141.56.48 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674691678.269:4260821): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1123 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691678.270:4260822): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=1123 suid=74 rport=35332 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=209.141.56.48 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691678.271:4260823): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=1122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691678.271:4260824): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=1122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691678.271:4260825): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=1122 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674691678.271:4260826): pid=1122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=209.141.56.48 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674691681.789:4260827): pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691681.789:4260828): pid=1146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691681.789:4260829): pid=1146 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258847 res=1
type=USER_START msg=audit(1674691681.807:4260830): pid=1146 uid=0 auid=1055 ses=258847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691681.809:4260831): pid=1146 uid=0 auid=1055 ses=258847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691682.168:4260832): pid=1146 uid=0 auid=1055 ses=258847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691682.170:4260833): pid=1146 uid=0 auid=1055 ses=258847 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691741.183:4260834): pid=1351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691741.183:4260835): pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691741.183:4260836): pid=1351 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691741.183:4260837): pid=1352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691741.183:4260838): pid=1351 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258848 res=1
type=LOGIN msg=audit(1674691741.183:4260839): pid=1352 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258849 res=1
type=USER_START msg=audit(1674691741.219:4260840): pid=1351 uid=0 auid=0 ses=258848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691741.219:4260841): pid=1352 uid=0 auid=1055 ses=258849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691741.220:4260842): pid=1352 uid=0 auid=1055 ses=258849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691741.221:4260843): pid=1351 uid=0 auid=0 ses=258848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691741.564:4260844): pid=1352 uid=0 auid=1055 ses=258849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691741.566:4260845): pid=1352 uid=0 auid=1055 ses=258849 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691742.536:4260846): pid=1351 uid=0 auid=0 ses=258848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691742.538:4260847): pid=1351 uid=0 auid=0 ses=258848 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674691780.277:4260848): avc: denied { read } for pid=1491 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674691780.277:4260848): avc: denied { open } for pid=1491 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691780.277:4260848): arch=c000003e syscall=2 success=yes exit=18 a0=55d72237ff70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=1491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691780.277:4260848): proctitle="dovecot/auth"
type=AVC msg=audit(1674691780.277:4260849): avc: denied { getattr } for pid=1491 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691780.277:4260849): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fffb132ac50 a2=7fffb132ac50 a3=fffffc00 items=0 ppid=5547 pid=1491 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691780.277:4260849): proctitle="dovecot/auth"
type=AVC msg=audit(1674691782.655:4260850): avc: denied { name_connect } for pid=1491 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674691782.655:4260850): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7fffb132aa40 a2=10 a3=7fffb132aa3c items=0 ppid=5547 pid=1491 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691782.655:4260850): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674691783.740:4260851): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674691783.740:4260851): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b0ed932b010 items=0 ppid=1500 pid=1505 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691783.740:4260851): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132332E3133382E3130312E313036002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3237
type=NETFILTER_CFG msg=audit(1674691793.575:4260852): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674691793.575:4260852): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ad9be9aa010 items=0 ppid=1529 pid=1534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691793.575:4260852): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003132322E3139332E3135302E323330002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3237
type=USER_ACCT msg=audit(1674691801.556:4260853): pid=1555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691801.556:4260854): pid=1556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691801.556:4260855): pid=1554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691801.556:4260856): pid=1555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691801.556:4260857): pid=1556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691801.556:4260858): pid=1554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691801.558:4260859): pid=1554 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258850 res=1
type=LOGIN msg=audit(1674691801.558:4260860): pid=1555 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258851 res=1
type=LOGIN msg=audit(1674691801.558:4260861): pid=1556 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258852 res=1
type=USER_START msg=audit(1674691801.608:4260862): pid=1554 uid=0 auid=0 ses=258850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691801.608:4260863): pid=1555 uid=0 auid=0 ses=258851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691801.608:4260864): pid=1556 uid=0 auid=1055 ses=258852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691801.609:4260865): pid=1554 uid=0 auid=0 ses=258850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691801.609:4260866): pid=1555 uid=0 auid=0 ses=258851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691801.610:4260867): pid=1556 uid=0 auid=1055 ses=258852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691801.637:4260868): pid=1554 uid=0 auid=0 ses=258850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691801.644:4260869): pid=1554 uid=0 auid=0 ses=258850 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691801.960:4260870): pid=1556 uid=0 auid=1055 ses=258852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691801.963:4260871): pid=1556 uid=0 auid=1055 ses=258852 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691804.950:4260872): pid=1555 uid=0 auid=0 ses=258851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691804.953:4260873): pid=1555 uid=0 auid=0 ses=258851 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691861.974:4260874): pid=1786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691861.974:4260875): pid=1786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691861.974:4260876): pid=1786 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258853 res=1
type=USER_START msg=audit(1674691861.991:4260877): pid=1786 uid=0 auid=1055 ses=258853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691861.993:4260878): pid=1786 uid=0 auid=1055 ses=258853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691862.357:4260879): pid=1786 uid=0 auid=1055 ses=258853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691862.359:4260880): pid=1786 uid=0 auid=1055 ses=258853 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674691905.270:4260881): avc: denied { read } for pid=1959 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674691905.270:4260881): avc: denied { open } for pid=1959 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691905.270:4260881): arch=c000003e syscall=2 success=yes exit=18 a0=55c5e9a63f70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691905.270:4260881): proctitle="dovecot/auth"
type=AVC msg=audit(1674691905.270:4260882): avc: denied { getattr } for pid=1959 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674691905.270:4260882): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7ffcd9ea38e0 a2=7ffcd9ea38e0 a3=fffffc00 items=0 ppid=5547 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691905.270:4260882): proctitle="dovecot/auth"
type=AVC msg=audit(1674691907.385:4260883): avc: denied { name_connect } for pid=1959 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674691907.385:4260883): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcd9ea36d0 a2=10 a3=7ffcd9ea36cc items=0 ppid=5547 pid=1959 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691907.385:4260883): proctitle="dovecot/auth"
type=AVC msg=audit(1674691907.413:4260884): avc: denied { write } for pid=1967 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674691907.413:4260884): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe69b4fcb0 a2=6e a3=63d1c543 items=0 ppid=5547 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691907.413:4260884): proctitle=646F7665636F742F61757468002D77
type=AVC msg=audit(1674691912.225:4260885): avc: denied { write } for pid=1967 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674691912.225:4260885): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffe69b4fcb0 a2=6e a3=63d1c548 items=0 ppid=5547 pid=1967 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691912.225:4260885): proctitle=646F7665636F742F61757468002D77
type=NETFILTER_CFG msg=audit(1674691919.807:4260886): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674691919.807:4260886): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b5bab0f1010 items=0 ppid=2118 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691919.807:4260886): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131322E32382E38392E313334002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32375430
type=USER_ACCT msg=audit(1674691921.377:4260887): pid=2130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691921.377:4260888): pid=2130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691921.378:4260889): pid=2130 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258854 res=1
type=USER_START msg=audit(1674691921.393:4260890): pid=2130 uid=0 auid=1055 ses=258854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691921.394:4260891): pid=2130 uid=0 auid=1055 ses=258854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691921.659:4260892): pid=2130 uid=0 auid=1055 ses=258854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691921.662:4260893): pid=2130 uid=0 auid=1055 ses=258854 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674691933.187:4260894): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674691933.187:4260894): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b918f941010 items=0 ppid=2181 pid=2186 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691933.187:4260894): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232312E3231302E392E3130002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3237543030
type=AVC msg=audit(1674691973.500:4260895): avc: denied { name_connect } for pid=1959 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674691973.500:4260895): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcd9ea36d0 a2=10 a3=7ffcd9ea36cc items=0 ppid=5547 pid=1959 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691973.500:4260895): proctitle="dovecot/auth"
type=CRYPTO_KEY_USER msg=audit(1674691975.521:4260896): pid=2323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691975.521:4260897): pid=2323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691975.521:4260898): pid=2323 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2323 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691975.524:4260899): pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=2323 suid=74 rport=22340 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691975.524:4260900): pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=2323 suid=74 rport=22340 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691977.874:4260901): pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2323 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691977.874:4260902): pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2323 suid=74 rport=22340 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691977.874:4260903): pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691977.875:4260904): pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691977.875:4260905): pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2319 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674691977.875:4260906): pid=2319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=ssh res=failed'
type=CRYPTO_KEY_USER msg=audit(1674691978.862:4260907): pid=2333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691978.862:4260908): pid=2333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691978.862:4260909): pid=2333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2333 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691978.863:4260910): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=2333 suid=74 rport=22346 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691978.863:4260911): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=2333 suid=74 rport=22346 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691981.360:4260912): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2333 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691981.360:4260913): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2333 suid=74 rport=22346 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691981.360:4260914): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691981.360:4260915): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691981.360:4260916): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2330 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674691981.360:4260917): pid=2330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=ssh res=failed'
type=USER_ACCT msg=audit(1674691981.676:4260918): pid=2344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674691981.676:4260919): pid=2345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691981.676:4260920): pid=2344 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674691981.676:4260921): pid=2345 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674691981.677:4260922): pid=2344 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258855 res=1
type=LOGIN msg=audit(1674691981.677:4260923): pid=2345 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258856 res=1
type=USER_START msg=audit(1674691981.714:4260925): pid=2344 uid=0 auid=0 ses=258855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674691981.714:4260924): pid=2345 uid=0 auid=1055 ses=258856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691981.715:4260926): pid=2345 uid=0 auid=1055 ses=258856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674691981.715:4260927): pid=2344 uid=0 auid=0 ses=258855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691981.769:4260928): pid=2344 uid=0 auid=0 ses=258855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691981.771:4260929): pid=2344 uid=0 auid=0 ses=258855 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674691981.985:4260930): pid=2345 uid=0 auid=1055 ses=258856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674691981.987:4260931): pid=2345 uid=0 auid=1055 ses=258856 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRYPTO_KEY_USER msg=audit(1674691982.320:4260932): pid=2361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691982.320:4260933): pid=2361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691982.321:4260934): pid=2361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2361 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691982.322:4260935): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=2361 suid=74 rport=6360 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_SESSION msg=audit(1674691982.322:4260936): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=2361 suid=74 rport=6360 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691984.903:4260937): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2361 suid=74 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691984.903:4260938): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=2361 suid=74 rport=6360 laddr=167.71.234.10 lport=22 exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691984.904:4260939): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:7f:0e:c0:21:9f:17:18:cd:87:15:24:cc:9c:c6:6f:17:c5:56:c2:80:d5:44:94:f1:3c:cb:6e:82:4c:aa:77:46 direction=? spid=2343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691984.904:4260940): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:d6:55:78:54:b2:38:8d:7d:ff:4e:c2:3e:b6:99:2c:63:a0:7f:c4:9e:d9:42:1a:f3:4d:3c:fe:d9:cb:5a:3f:4f direction=? spid=2343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=CRYPTO_KEY_USER msg=audit(1674691984.904:4260941): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:8f:93:ab:ca:c4:70:80:15:e2:f8:e7:c7:07:e6:4f:87:f6:13:9a:d7:98:8e:7a:39:e5:5c:12:b2:4d:c6:56:70 direction=? spid=2343 suid=0 exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'
type=USER_LOGIN msg=audit(1674691984.905:4260942): pid=2343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=172.105.128.11 terminal=ssh res=failed'
type=NETFILTER_CFG msg=audit(1674691991.346:4260943): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674691991.346:4260943): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ae246441010 items=0 ppid=2389 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674691991.346:4260943): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003131312E32362E3230362E313133002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D323754
type=USER_ACCT msg=audit(1674692042.002:4260944): pid=2555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692042.002:4260945): pid=2556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692042.002:4260946): pid=2555 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692042.002:4260947): pid=2556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692042.002:4260949): pid=2555 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258858 res=1
type=LOGIN msg=audit(1674692042.002:4260948): pid=2556 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258857 res=1
type=USER_START msg=audit(1674692042.027:4260950): pid=2555 uid=0 auid=0 ses=258858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674692042.027:4260951): pid=2556 uid=0 auid=1055 ses=258857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692042.028:4260952): pid=2555 uid=0 auid=0 ses=258858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692042.028:4260953): pid=2556 uid=0 auid=1055 ses=258857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692042.252:4260954): pid=2556 uid=0 auid=1055 ses=258857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692042.254:4260955): pid=2556 uid=0 auid=1055 ses=258857 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SOFTWARE_UPDATE msg=audit(1674692054.405:4260956): pid=2664 uid=0 auid=0 ses=258858 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='sw="rpm_is_working-1.0-0.noarch" sw_type=rpm key_enforce=0 gpg_res=0 root_dir="/" comm="rpm" exe="/usr/bin/rpm" hostname=? addr=? terminal=? res=success'
type=AVC msg=audit(1674692059.039:4260957): avc: denied { name_connect } for pid=1959 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674692059.039:4260957): arch=c000003e syscall=42 success=no exit=-115 a0=15 a1=7ffcd9ea36d0 a2=10 a3=7ffcd9ea36cc items=0 ppid=5547 pid=1959 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692059.039:4260957): proctitle="dovecot/auth"
type=NETFILTER_CFG msg=audit(1674692060.141:4260958): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674692060.141:4260958): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2ab7fe6c0010 items=0 ppid=2689 pid=2696 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692060.141:4260958): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F757263650033362E33352E32342E313030002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D3237543030
type=NETFILTER_CFG msg=audit(1674692074.094:4260959): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674692074.094:4260959): arch=c000003e syscall=54 success=yes exit=0 a0=4 a1=0 a2=40 a3=2b647022a010 items=0 ppid=2808 pid=2813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692074.094:4260959): proctitle=2F7362696E2F69707461626C6573002D77003230002D2D617070656E6400637068756C6B002D2D736F75726365003232332E39392E3137302E3430002D2D6D61746368007374617465002D2D7374617465004E4557002D2D6D617463680074696D65002D2D757463002D2D6461746573746F7000323032332D30312D32375430
type=AVC msg=audit(1674692083.004:4260960): avc: denied { write } for pid=2996 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674692083.004:4260960): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffc414617e0 a2=6e a3=63d1c5f3 items=0 ppid=5547 pid=2996 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692083.004:4260960): proctitle=646F7665636F742F61757468002D77
type=CRED_DISP msg=audit(1674692083.305:4260961): pid=2555 uid=0 auid=0 ses=258858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692083.310:4260962): pid=2555 uid=0 auid=0 ses=258858 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692101.331:4260963): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692101.331:4260964): pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692101.331:4260965): pid=3200 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692101.331:4260966): pid=3199 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692101.332:4260967): pid=3199 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258859 res=1
type=LOGIN msg=audit(1674692101.332:4260968): pid=3200 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258860 res=1
type=USER_ACCT msg=audit(1674692101.335:4260969): pid=3201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692101.335:4260970): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692101.335:4260971): pid=3201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692101.336:4260972): pid=3198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692101.336:4260973): pid=3201 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258861 res=1
type=LOGIN msg=audit(1674692101.336:4260974): pid=3198 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258862 res=1
type=USER_START msg=audit(1674692101.382:4260975): pid=3200 uid=0 auid=0 ses=258860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674692101.383:4260976): pid=3199 uid=0 auid=0 ses=258859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674692101.384:4260977): pid=3201 uid=0 auid=1055 ses=258861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692101.385:4260978): pid=3201 uid=0 auid=1055 ses=258861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692101.385:4260979): pid=3200 uid=0 auid=0 ses=258860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674692101.386:4260980): pid=3198 uid=0 auid=0 ses=258862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692101.386:4260981): pid=3199 uid=0 auid=0 ses=258859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692101.386:4260982): pid=3198 uid=0 auid=0 ses=258862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692101.525:4260983): pid=3198 uid=0 auid=0 ses=258862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692101.528:4260984): pid=3198 uid=0 auid=0 ses=258862 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692101.699:4260985): pid=3201 uid=0 auid=1055 ses=258861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692101.700:4260986): pid=3201 uid=0 auid=1055 ses=258861 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692102.253:4260987): pid=3200 uid=0 auid=0 ses=258860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692102.255:4260988): pid=3200 uid=0 auid=0 ses=258860 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692104.762:4260989): pid=3199 uid=0 auid=0 ses=258859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692104.764:4260990): pid=3199 uid=0 auid=0 ses=258859 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692161.783:4260991): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692161.783:4260992): pid=3700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692161.784:4260993): pid=3700 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258863 res=1
type=USER_START msg=audit(1674692161.799:4260994): pid=3700 uid=0 auid=1055 ses=258863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692161.801:4260995): pid=3700 uid=0 auid=1055 ses=258863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692162.026:4260996): pid=3700 uid=0 auid=1055 ses=258863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692162.028:4260997): pid=3700 uid=0 auid=1055 ses=258863 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=SERVICE_STOP msg=audit(1674692177.796:4260998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=spamd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=SERVICE_START msg=audit(1674692185.146:4260999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=spamd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692221.048:4261000): pid=4092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692221.048:4261001): pid=4092 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692221.049:4261002): pid=4092 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258864 res=1
type=USER_START msg=audit(1674692221.062:4261003): pid=4092 uid=0 auid=1055 ses=258864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692221.063:4261004): pid=4092 uid=0 auid=1055 ses=258864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692221.341:4261005): pid=4092 uid=0 auid=1055 ses=258864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692221.343:4261006): pid=4092 uid=0 auid=1055 ses=258864 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692281.355:4261007): pid=4285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692281.356:4261008): pid=4285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692281.356:4261009): pid=4285 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258865 res=1
type=USER_START msg=audit(1674692281.371:4261010): pid=4285 uid=0 auid=1055 ses=258865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692281.372:4261011): pid=4285 uid=0 auid=1055 ses=258865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692281.591:4261012): pid=4285 uid=0 auid=1055 ses=258865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692281.592:4261013): pid=4285 uid=0 auid=1055 ses=258865 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=AVC msg=audit(1674692307.861:4261014): avc: denied { read } for pid=4407 comm="auth" name="auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=AVC msg=audit(1674692307.861:4261014): avc: denied { open } for pid=4407 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674692307.861:4261014): arch=c000003e syscall=2 success=yes exit=18 a0=55bf4f90df70 a1=0 a2=70a0 a3=fffffc00 items=0 ppid=5547 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692307.861:4261014): proctitle="dovecot/auth"
type=AVC msg=audit(1674692307.861:4261015): avc: denied { getattr } for pid=4407 comm="auth" path="/run/dovecot/auth-token-secret.dat" dev="tmpfs" ino=31701007 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
type=SYSCALL msg=audit(1674692307.861:4261015): arch=c000003e syscall=5 success=yes exit=0 a0=12 a1=7fff82b01e90 a2=7fff82b01e90 a3=fffffc00 items=0 ppid=5547 pid=4407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692307.861:4261015): proctitle="dovecot/auth"
type=AVC msg=audit(1674692308.390:4261016): avc: denied { name_connect } for pid=4407 comm="auth" dest=579 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=tcp_socket permissive=1
type=SYSCALL msg=audit(1674692308.390:4261016): arch=c000003e syscall=42 success=no exit=-115 a0=16 a1=7fff82b01c80 a2=10 a3=7fff82b01c7c items=0 ppid=5547 pid=4407 auid=4294967295 uid=97 gid=97 euid=97 suid=97 fsuid=97 egid=97 sgid=97 fsgid=97 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692308.390:4261016): proctitle="dovecot/auth"
type=AVC msg=audit(1674692308.421:4261017): avc: denied { write } for pid=4436 comm="auth" name="cpdoveauthd.sock" dev="vda1" ino=188773757 scontext=system_u:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=sock_file permissive=1
type=SYSCALL msg=audit(1674692308.421:4261017): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7ffd3e4f9b80 a2=6e a3=63d1c6d4 items=0 ppid=5547 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auth" exe="/usr/libexec/dovecot/auth" subj=system_u:system_r:dovecot_auth_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692308.421:4261017): proctitle=646F7665636F742F61757468002D77
type=USER_ACCT msg=audit(1674692341.609:4261018): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692341.609:4261019): pid=4574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692341.609:4261020): pid=4574 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258866 res=1
type=USER_START msg=audit(1674692341.627:4261021): pid=4574 uid=0 auid=1055 ses=258866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692341.629:4261022): pid=4574 uid=0 auid=1055 ses=258866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692341.905:4261023): pid=4574 uid=0 auid=1055 ses=258866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692341.906:4261024): pid=4574 uid=0 auid=1055 ses=258866 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692401.923:4261025): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692401.923:4261026): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692401.923:4261027): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692401.923:4261028): pid=4767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692401.923:4261029): pid=4769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692401.923:4261030): pid=4768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692401.923:4261032): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692401.923:4261031): pid=4767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692401.925:4261033): pid=4769 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258867 res=1
type=LOGIN msg=audit(1674692401.925:4261034): pid=4767 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258868 res=1
type=LOGIN msg=audit(1674692401.925:4261035): pid=4768 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258869 res=1
type=LOGIN msg=audit(1674692401.925:4261036): pid=4766 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258870 res=1
type=USER_START msg=audit(1674692402.006:4261037): pid=4769 uid=0 auid=1055 ses=258867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674692402.006:4261038): pid=4767 uid=0 auid=0 ses=258868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674692402.007:4261039): pid=4766 uid=0 auid=0 ses=258870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692402.008:4261040): pid=4769 uid=0 auid=1055 ses=258867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692402.008:4261041): pid=4767 uid=0 auid=0 ses=258868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692402.008:4261042): pid=4766 uid=0 auid=0 ses=258870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_START msg=audit(1674692402.008:4261043): pid=4768 uid=0 auid=0 ses=258869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692402.009:4261044): pid=4768 uid=0 auid=0 ses=258869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692402.038:4261045): pid=4766 uid=0 auid=0 ses=258870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692402.041:4261046): pid=4766 uid=0 auid=0 ses=258870 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692402.103:4261047): pid=4768 uid=0 auid=0 ses=258869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692402.106:4261048): pid=4768 uid=0 auid=0 ses=258869 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692402.327:4261049): pid=4769 uid=0 auid=1055 ses=258867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692402.331:4261050): pid=4769 uid=0 auid=1055 ses=258867 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=NETFILTER_CFG msg=audit(1674692404.239:4261051): table=filter family=2 entries=1057
type=SYSCALL msg=audit(1674692404.239:4261051): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2abcb6971010 items=0 ppid=1588 pid=4804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.239:4261051): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003132352E37322E3132382E3231382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A33313A3133002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.243:4261052): table=filter family=2 entries=1056
type=SYSCALL msg=audit(1674692404.243:4261052): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b0140756010 items=0 ppid=1588 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.243:4261052): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003130332E3134332E3131352E32382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A33373A3434002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.246:4261053): table=filter family=2 entries=1055
type=SYSCALL msg=audit(1674692404.246:4261053): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1596a45010 items=0 ppid=1588 pid=4806 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.246:4261053): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730033362E33352E32342E3130322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A34323A3433002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.250:4261054): table=filter family=2 entries=1054
type=SYSCALL msg=audit(1674692404.250:4261054): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af3093c7010 items=0 ppid=1588 pid=4807 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.250:4261054): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131322E322E32302E3234322F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A34363A3531002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.255:4261055): table=filter family=2 entries=1053
type=SYSCALL msg=audit(1674692404.255:4261055): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b1d401b6010 items=0 ppid=1588 pid=4808 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.255:4261055): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131312E32302E3233372E3135382F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A34373A3034002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.259:4261056): table=filter family=2 entries=1052
type=SYSCALL msg=audit(1674692404.259:4261056): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b042a219010 items=0 ppid=1588 pid=4809 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.259:4261056): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003131382E3235302E3138322E37332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32355432333A35363A3338002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.262:4261057): table=filter family=2 entries=1051
type=SYSCALL msg=audit(1674692404.262:4261057): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ad31cc71010 items=0 ppid=1588 pid=4810 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.262:4261057): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036302E3136392E36362E3131332F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32365430303A30363A3131002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.266:4261058): table=filter family=2 entries=1050
type=SYSCALL msg=audit(1674692404.266:4261058): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2b104932d010 items=0 ppid=1588 pid=4811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.266:4261058): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730031352E3233352E38322E33372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32365430303A31313A3235002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.269:4261059): table=filter family=2 entries=1049
type=SYSCALL msg=audit(1674692404.269:4261059): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2af36e8f9010 items=0 ppid=1588 pid=4812 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.269:4261059): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003231382E32332E3135362E3232372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32365430303A31323A3539002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.273:4261060): table=filter family=2 entries=1048
type=SYSCALL msg=audit(1674692404.273:4261060): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2ab9aabd5010 items=0 ppid=1588 pid=4813 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.273:4261060): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D73003232312E372E36312E33342F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32365430303A31373A3436002D6A0044524F50
type=NETFILTER_CFG msg=audit(1674692404.277:4261061): table=filter family=2 entries=1047
type=SYSCALL msg=audit(1674692404.277:4261061): arch=c000003e syscall=54 success=yes exit=0 a0=6 a1=0 a2=40 a3=2adea62b5010 items=0 ppid=1588 pid=4814 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-multi" subj=system_u:system_r:unconfined_service_t:s0 key=(null)
type=PROCTITLE msg=audit(1674692404.277:4261061): proctitle=2F7362696E2F69707461626C6573002D77003230002D4400637068756C6B002D730036312E3136322E3232302E39372F3332002D6D007374617465002D2D7374617465004E4557002D6D0074696D65002D2D6461746573746F7000323032332D30312D32365430303A31373A3534002D6A0044524F50
type=CRED_DISP msg=audit(1674692405.377:4261062): pid=4767 uid=0 auid=0 ses=258868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692405.379:4261063): pid=4767 uid=0 auid=0 ses=258868 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692461.401:4261064): pid=4997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_localuser acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_ACQ msg=audit(1674692461.401:4261065): pid=4997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=LOGIN msg=audit(1674692461.401:4261066): pid=4997 uid=0 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1055 tty=(none) old-ses=4294967295 ses=258871 res=1
type=USER_START msg=audit(1674692461.417:4261067): pid=4997 uid=0 auid=1055 ses=258871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_REFR msg=audit(1674692461.419:4261068): pid=4997 uid=0 auid=1055 ses=258871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=CRED_DISP msg=audit(1674692461.666:4261069): pid=4997 uid=0 auid=1055 ses=258871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_END msg=audit(1674692461.668:4261070): pid=4997 uid=0 auid=1055 ses=258871 subj=system_u:system_r:crond_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_loginuid,pam_keyinit,pam_limits,pam_systemd acct="wwwpmcresource" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'
type=USER_ACCT msg=audit(1674692464.680:4261071): pid=5018 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692464.680:4261072): pid=5018 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674692464.680:4261073): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692464.700:4261074): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692464.703:4261075): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692464.703:4261076): pid=5018 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692464.723:4261077): pid=5022 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692464.723:4261078): pid=5022 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674692464.724:4261079): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692464.736:4261080): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692464.739:4261081): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692464.740:4261082): pid=5022 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692464.760:4261083): pid=5027 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692464.760:4261084): pid=5027 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674692464.760:4261085): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692464.773:4261086): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692464.777:4261087): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692464.777:4261088): pid=5027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692464.896:4261089): pid=5034 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692464.896:4261090): pid=5034 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F64656269616E5F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674692464.897:4261091): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692464.909:4261092): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692464.912:4261093): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692464.912:4261094): pid=5034 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692464.934:4261095): pid=5039 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692464.934:4261096): pid=5039 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674692464.934:4261097): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692464.948:4261098): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692464.951:4261099): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692464.951:4261100): pid=5039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692464.976:4261101): pid=5044 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692464.976:4261102): pid=5044 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F7265646861742D72656C65617365 terminal=? res=success'
type=CRED_REFR msg=audit(1674692464.976:4261103): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692464.993:4261104): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692464.996:4261105): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692464.996:4261106): pid=5044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692465.027:4261107): pid=5050 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692465.027:4261108): pid=5050 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6F70742F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674692465.027:4261109): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692465.044:4261110): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692465.048:4261111): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692465.048:4261112): pid=5050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692465.071:4261113): pid=5053 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692465.071:4261114): pid=5053 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674692465.072:4261115): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692465.084:4261116): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692465.088:4261117): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692465.088:4261118): pid=5053 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692465.111:4261119): pid=5059 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692465.111:4261120): pid=5059 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F707361 terminal=? res=success'
type=CRED_REFR msg=audit(1674692465.111:4261121): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692465.125:4261122): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692465.128:4261123): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692465.128:4261124): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692465.149:4261125): pid=5064 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692465.149:4261126): pid=5064 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F7573722F6C6F63616C2F6370616E656C terminal=? res=success'
type=CRED_REFR msg=audit(1674692465.152:4261127): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692465.165:4261128): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692465.168:4261129): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692465.168:4261130): pid=5064 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692465.191:4261131): pid=5069 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692465.191:4261132): pid=5069 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F7573722F6C6F63616C2F6370616E656C2F76657273696F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674692465.191:4261133): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692465.204:4261134): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692465.208:4261135): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692465.208:4261136): pid=5069 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692467.188:4261137): pid=5078 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692467.188:4261138): pid=5078 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206765745F646F6D61696E5F696E666F202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674692467.189:4261139): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692467.202:4261140): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692467.258:4261141): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692467.258:4261142): pid=5078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692467.289:4261143): pid=5085 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692467.289:4261144): pid=5085 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D632077686D61706931206C6973746163637473202D2D6F75747075743D6A736F6E terminal=? res=success'
type=CRED_REFR msg=audit(1674692467.289:4261145): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692467.304:4261146): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692467.383:4261147): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692467.383:4261148): pid=5085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692467.406:4261149): pid=5091 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692467.406:4261150): pid=5091 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd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terminal=? res=success'
type=CRED_REFR msg=audit(1674692467.407:4261151): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692467.421:4261152): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692467.530:4261153): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692467.530:4261154): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692467.567:4261155): pid=5097 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692467.568:4261156): pid=5097 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D66202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674692467.568:4261157): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692467.581:4261158): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692467.584:4261159): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692467.584:4261160): pid=5097 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692467.609:4261161): pid=5101 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692467.609:4261162): pid=5101 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D4A724C47757566434D55694C663446722E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674692467.610:4261163): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692467.622:4261164): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692467.625:4261165): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692467.625:4261166): pid=5101 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692467.646:4261167): pid=5105 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692467.646:4261168): pid=5105 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D6320636174203E20272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D4A724C47757566434D55694C663446722E7E27 terminal=? res=success'
type=CRED_REFR msg=audit(1674692467.647:4261169): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692467.660:4261170): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692467.665:4261171): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692467.665:4261172): pid=5105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692467.685:4261173): pid=5112 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692467.686:4261174): pid=5112 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=6D76202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732D7770742D746D702D4A724C47757566434D55694C663446722E7E202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E terminal=? res=success'
type=CRED_REFR msg=audit(1674692467.686:4261175): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692467.699:4261176): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692467.703:4261177): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692467.703:4261178): pid=5112 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692467.724:4261179): pid=5117 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692467.724:4261180): pid=5117 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=2F62696E2F7368202D63206D7620272F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F67732E7E27202F6574632F6C6F67726F746174652E642F77702D746F6F6C6B69742D616374696F6E2D6C6F6773 terminal=? res=success'
type=CRED_REFR msg=audit(1674692467.724:4261181): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692467.738:4261182): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692467.743:4261183): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692467.743:4261184): pid=5117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692468.126:4261185): pid=5122 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692468.126:4261186): pid=5122 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F686F6D652F75676F7473636F6D2F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674692468.126:4261187): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692468.140:4261188): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692468.144:4261189): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692468.144:4261190): pid=5122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="ugotscom" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692468.291:4261191): pid=5131 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692468.291:4261192): pid=5131 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=74657374202D65202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674692468.291:4261193): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692468.308:4261194): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692468.311:4261195): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692468.311:4261196): pid=5131 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692468.332:4261197): pid=5137 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692468.332:4261198): pid=5137 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F6574632F706173737764 terminal=? res=success'
type=CRED_REFR msg=audit(1674692468.332:4261199): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_START msg=audit(1674692468.347:4261200): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_END msg=audit(1674692468.350:4261201): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=CRED_DISP msg=audit(1674692468.350:4261202): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_ACCT msg=audit(1674692468.370:4261203): pid=5142 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="wp-toolkit" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
type=USER_CMD msg=audit(1674692468.371:4261204): pid=5142 uid=992 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='cwd="/usr/local/cpanel/3rdparty/wp-toolkit/scripts" cmd=636174202F726F6F742F2E77702D746F6F6C6B69742D6964656E746966696572 terminal=? res=success'
type=CRED_REFR msg=audit(1674692468.371:4261205): pid=5142 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:unconfined_service_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
Zerion Mini Shell 1.0